v1.5.1

Fixes

  • [vd] Fixed an issue with creating a virtual disk from a virtual image stored on a PersistentVolumeClaim (with .spec.storage set to PersistentVolumeClaim).

v1.5.0

New features

  • [vm] Added support for targeted migration of virtual machines. To do this, create a VirtualMachineOperation resource with the Migrate type and specify .spec.migrate.nodeSelector to migrate the virtual machine to the corresponding node.
  • [observability] Added a table with virtual machine operations to the Namespace / Virtual Machine dashboard.

Fixes

  • [core] Fixed an issue with starting virtual machines using the EFIWithSecureBoot bootloader when configured with more than 12 vCPUs.
  • [vmop] Fixed an issue with cloning a virtual machine whose disks use storage in WaitForFirstConsumer mode.
  • [module] System component resources required for starting and running virtual machines are no longer counted in project quotas.
  • [module] During virtual machine migration, temporary double consumption of resources is no longer counted in project quotas.
  • [module] Platform system components in user projects are protected from deletion by users.
  • [vm] Fixed a possible virtual machine hang in the Pending state during migration when changing the StorageClass.
  • [vd] Fixed an issue with live migration of a virtual machine between StorageClass with the Filesystem type.

Other

  • [vd] When viewing disks, the name of the virtual machine they are attached to is now displayed (d8 k get vd).

v1.4.1

Security

  • [module] Fixed vulnerabilities CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, and CVE-2025-68121.

v1.4.0

New features

Fixes

  • [module] Fixed project quota accounting for resources used by system components required to create disks/images and operate virtual machines.
  • [vi,cvi] Added tracking of image availability in DVCR. If an image disappears from DVCR, the corresponding VirtualImage and ClusterVirtualImage resources enter the Lost phase and report an error.
  • [vmip] Fixed IP address attachment when the corresponding VirtualMachineIPAddress resource was created manually in advance.
  • [vm] Added support for cloning virtual machines in the Running phase via VirtualMachineOperation of type Clone.

v1.3.0

New features

  • [vmclass] Added the .spec.sizingPolicies.defaultCoreFraction field to the VirtualMachineClass resource, allowing you to set the default coreFraction for virtual machines that use this class.

Fixes

  • [vi/cvi] Added the ability to use system nodes to create project and cluster images.
  • [vd] Accelerated disk attachment in WaitForFirstConsumer mode for virtual machines.
  • [vd] Fixed an issue with restoring labels and annotations on a disk created from a snapshot.
  • [observability] Fixed the display of virtual machine charts in clusters running in HA mode.

v1.2.2

Fixes

  • [module] Fixed RBAC access permissions for the d8:use:role:user role that prevented it from managing the VirtualMachineOperation resource.

v1.2.1

Fixes

  • [module] The deprecated part of the configuration has been removed, which could have prevented the virtualization module from upgrading in clusters running Kubernetes version 1.34 and above.

v1.2.0

New features

  • [vmrestore] The VirtualMachineRestore resource is deprecated. Use the following resources instead:
  • [vmsop] Added the VirtualMachineSnapshotOperation resource for creating a virtual machine based on a VirtualMachineSnapshot.
  • [vmclass] For the VirtualMachineClass resource, version v1alpha2 is deprecated. Use version v1alpha3 instead:
    • In version v1alpha3, the .spec.sizingPolicies.coreFraction field is now a string with a percentage (for example, “50%”), similar to the field in a virtual machine.
  • [module] Added validation for the virtualization ModuleConfig that prevents decreasing the DVCR storage size and changing its StorageClass.
  • [module] Improved audit events by using more informative messages that include virtual machine names and user information.
  • [module] Added the ability to clean up DVCR from non-existent project and cluster images:
    • By default, this feature is disabled.
    • To enable cleanup, set a schedule in the module settings: .spec.settings.dvcr.gc.schedule.
  • [vmbda] Added detailed error output in the Attached condition of the VirtualMachineBlockDeviceAttachment resource when a block device is unavailable on the virtual machine node.
  • [module] Added new metrics for disks:
    • d8_virtualization_virtualdisk_capacity_bytes: Metric showing the disk size.
    • d8_virtualization_virtualdisk_info: Metric with information about the disk configuration.
    • d8_virtualization_virtualdisk_status_inuse: Metric showing the current use of the disk by a virtual machine or for creating other block devices.

Fixes

  • [vmclass] Added the ability to modify or delete the VirtualMachineClass resource named “generic”. The virtualization module will no longer restore it to its original state.
  • [vm] Fixed the MethodNotAllowed error for patch and watch operations when querying the VirtualMachineClass resource via command-line utilities (d8 k, kubectl).
  • [image] Fixed an issue that prevented deleting VirtualImage and ClusterVirtualImage resources for a stopped virtual machine.
  • [module] Fixed RBAC for the user and editor cluster roles.
  • [module] Fixed the D8VirtualizationVirtualMachineFirmwareOutOfDate alert, which could be duplicated when virtualization runs in HA mode.
  • [snapshot] Fixed an error that could lead to inconsistencies between VirtualMachineSnapshot and VirtualDiskSnapshot resources when creating a snapshot of a virtual machine with multiple disks.

Security

  • [module] Fixed vulnerability CVE-2025-64324.

v1.1.3

Security

  • [module] Fixed CVE-2025-64324, CVE-2025-64435, CVE-2025-64436, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-52565, CVE-2025-52881, CVE-2025-31133.

Other

  • [observability] The virtual machine overview dashboards (Namespace / Virtual Machine and Namespace / Virtual Machines) have been improved: in addition to the cluster level, they are now also available at the project level.

v1.1.2

Fixes

  • [vd] Fixed live disk migration between StorageClasses that use different drivers. Restrictions:
    • Migration between Block and Filesystem is not supported. Only migrations between the same volume mode are allowed: Block → Block and Filesystem → Filesystem.
  • [vm] In the Migrating state, detailed error information is now displayed when a live migration of a virtual machine fails.

v1.1.1

Fixes

  • [core] Fixed an issue in the containerd v2 where storage providing a PVC with the Filesystem type was incorrectly attached via VirtualMachineBlockDeviceAttachment.
  • [core] Added error reporting in the status of disks and images when the data source (URL) is unavailable.
  • [vi] When creating virtual images from virtual disk snapshots, the .spec.persistentVolumeClaim.storageClassName parameter is now respected. Previously, it could be ignored.
  • [vm] Fixed the NetworkReady condition output: it no longer shows the Unknown state and appears only when needed.
  • [vm] Prohibited duplicate networks in the virtual machine .spec.network specification.
  • [vmip] Added validation for static IP addresses to avoid creating a VirtualMachineIPAddress resource with an IP already in use in the cluster.
  • [vmbda] Fixed a bug where, when detaching a virtual image through VirtualMachineBlockDeviceAttachment, the resource could get stuck in the Terminating state.

Other

  • [observability] Added Prometheus metrics for virtual machine snapshots (d8_virtualization_virtualmachinesnapshot_info) and virtual disk snapshots (d8_virtualization_virtualdisksnapshot_info), showing which objects they are associated with.

Security

  • [module] Fixed vulnerabilities CVE-2025-58058 and CVE-2025-54410.

v1.1.0

New features

  • [vm] Added the ability to migrate VMs using disks on local storage. Restrictions:
    • The feature is not available in the CE edition.
    • Migration is only possible for running VMs (phase: Running).
    • Migration of VMs with local disks connected via VirtualMachineBlockDeviceAttachment (hotplug) is not supported yet.
  • [vd] Added the ability to migrate storage for VM disks (change StorageClass). Restrictions:
    • The feature is not available in the CE edition.
    • Migration is only possible for running VMs (phase: Running).
    • Storage migration for disks connected via VirtualMachineBlockDeviceAttachment (hotplug) is not supported yet.
  • [vmop] Added an operation with the Clone type to create a clone of a VM from an existing VM (VirtualMachineOperation .spec.type: Clone).
  • [observability] Added the KubeNodeAwaitingVirtualMachinesEvictionBeforeShutdown alert, which is triggered when the node hosting the virtual machines is about to shut down but VM evacuation is not yet complete.
  • [observability] Added the D8VirtualizationDVCRInsufficientCapacityRisk alert, which warns of the risk of insufficient free space in the virtual machine image storage (DVCR).

Fixes

  • [vmclass] Fixed an issue in VirtualMachineClass types Features and Discovery that caused nested virtualization not to work on nodes with AMD processors.
  • [vmop/restore] Fixed a bug where the controller sometimes started a restored VM before its disks were fully restored, resulting in the VM starting with old (unrestored) disks.
  • [vmsnapshot] Fixed behavior when creating a VM snapshot with uncommitted changes: the snapshot now instantly captures the current state of the virtual machine, including all current changes.
  • [module] Fixed an issue with installing the module on RedOS 8.X OS.
  • [module] Improved validation to prevent adding empty values for parameters that define StorageClass for disks and images.
  • [vmop] Fixed garbage collector behavior: previously, all VMOP objects were deleted after restarting the virtualization controller, ignoring cleanup rules.
  • [observability] The virtual machine dashboard now displays statistics for all networks (including additional ones) connected to the VM.
  • [observability] Fixed the graph on the virtual machine dashboard that displays memory copy statistics during VM migration.

v1.0.0

New features

  • [vm] Added protection to prevent a cloud image (VirtualImage \ ClusterVirtualImage) from being connected as the first disk. Previously, this caused the VM to fail to start with the “No bootable device” error.
  • [vmop] Added Restore operation to restore a VM from a previously created snapshot.

Fixes

  • [vmsnapshot] When restoring a virtual machine from a snapshot, all annotations and labels that were present on the resources at the time of the snapshot are now restored correctly.
  • [module] Fixed an issue with queue blocking when the settings.modules.publicClusterDomain parameter was empty in the global ModuleConfig resource.
  • [module] Optimized hook performance during module installation.
  • [vmclass] Fixed core/coreFraction validation in the VirtualMachineClass resource.
  • [module] When the sdn module is disabled, the configuration of additional networks in the VM is not available.

Security

  • Fixed CVE-2025-47907.

v0.25.0

Important notes before update

In version v0.25.0, support for the module’s operation with CRI containerd v2 has been added. After upgrading CRI from containerd v1 to containerd v2, it is necessary to recreate the images that were created using the virtualization module version v0.24.0 or earlier.

New features

  • [observability] New Prometheus metrics have been added to track the phase of resources such as VirtualMachineSnapshot, VirtualDiskSnapshot, VirtualImage, and ClusterVirtualImage.
  • [vm] MAC address management for additional network interfaces has been added using the VirtualMachineMACAddress and VirtualMachineMACAddressLease resources.
  • [vm] Added the ability to attach additional network interfaces to a virtual machine for networks provided by the sdn module. For this, the sdn module must be enabled in the cluster.
  • [vmclass] An annotation has been added to set the default VirtualMachineClass. You can designate a VirtualMachineClass as the default by adding the annotation virtualmachineclass.virtualization.deckhouse.io/is-default-class=true. This allows creating VMs with an empty spec.virtualMachineClassName field, which will be automatically filled with the default class.

Fixes

  • [module] Added validation to ensure that virtual machine subnets do not overlap with system subnets (podSubnetCIDR and serviceSubnetCIDR).
  • [vi] To create a virtual image on a PersistentVolumeClaim, the storage must support the RWX and Block modes; otherwise, a warning will be displayed.
  • [vm] Fixed an issue where changing the operating system type caused the machine to enter a reboot loop.
  • [vm] Fixed an issue where a virtual machine would hang in the Starting phase when project quotas were insufficient. A quota shortage message will now be displayed in the virtual machine’s status. To allow the machine to continue starting, the project quotas need to be increased.

Other

  • [vmop] Improved the garbage collector (GC) for completed virtual machine operations:
    • Runs daily at 00:00.
    • Removes successfully completed operations (Completed / Failed) after their TTL (24 hours) expires.
    • Retains only the last 10 completed operations.