Portworx CSI Release Notes

Portworx CSI (PX-CSI) is a lightweight storage orchestration solution that uses the Kubernetes Container Storage Interface (CSI) framework to integrate the Pure Storage storage solutions.

PX-CSI integrates with Kubernetes to directly access Pure Storage FlashArray Direct Access volumes (FADA) and FlashBlade Direct Access volumes (FBDA).

If you're setting up PX-CSI for the first time, see Install Portworx CSI. If you're already using PX-CSI, upgrade to the latest version. For upgrade instructions, see Upgrade Portworx CSI.

For information about supported versions, release numbering, and support phases, refer to the PX-CSI Life Cycle Support Policy.

Removal of pxctl CLI

The pxctl CLI is removed starting with PX-CSI 25.8.0. Use standard Kubernetes tools such as kubectl, oc, or apply YAML manifests to manage CustomResource objects for operational and configuration tasks.

PX-CSI 25.2.0

February 24, 2025

What's New

• FADA Raw Block (RWX)
  PX-CSI now supports FADA Raw Block (RWX), enabling live migration of KubeVirt VMs with high-performance raw block storage. This eliminates filesystem overhead, improves I/O performance, and ensures seamless migration by allowing simultaneous volume access on source and destination nodes. For more information, see Run KubeVirt VMs with raw block RWX volumes for live migration support.

• NVMe-oF/TCP support for FADA
  PX-CSI now supports NVMe-oF/TCP over IPv4, providing high-performance, low-latency storage access for Kubernetes applications using FlashArray LUNs. By leveraging standard TCP/IP, this feature eliminates the need for specialized networking hardware like RoCEv2, making deployment more flexible and cost-effective while maintaining optimal performance. For more information, see Set up NVMe-oF TCP protocol with FlashArray.

  Note: NVMe/TCP is supported with IPv4 protocol in this release. Support for NVMe/TCP with IPv6 will be available in a future release.

• Encryption support for FADA
  PX-CSI now supports FADA Encryption, providing seamless data protection by encrypting information both in transit and at rest on FlashArray storage. Encryption keys are used consistently across the cluster, even with multiple FlashArrays. This feature ensures that data remains secure throughout the process, with encryption handled at the storage level. For more information, see Encrypt FADA volumes.

Resolved Issues

Issue Number	Issue Description	Severity
PWX-41400	Updated oci-monitor image and golang.org/x/crypto package to resolve security vulnerabilities.	Major
PWX-40001	Updated stdlib and golang/go packages to resolve security vulnerabilities.	Major
PWX-41663	If Kubernetes clusters contain FlashBlade volumes migrated from Pure Storage Orchestrator (PSO) clusters, the Portworx process on these systems enters a continuous crash loop, preventing normal volume operations. Affected Versions: 25.1.0	Minor

Known Issues

• PWX-42230: On OpenShift Container Platform (OCP) versions 4.16 or earlier, Forklift requires a manual update to the StorageProfile configuration to function correctly. By default, OpenShift provisions PVCs in filesystem mode, which is incompatible with PX-CSI. Additionally, Forklift does not recognize Portworx as a provider of RWX volumes in Block mode. As a result, VM migrations from VMware to KubeVirt using PX-CSI might fail.

  Workaround: Before starting the migration, manually update the StorageProfile as follows:

  kind: StorageProfile
  metadata:
    name: <storageclass-name>
  spec:
    claimPropertySets:
      - accessModes:
        - ReadWriteMany
        volumeMode: Block

  Replace <storageclass-name> with the name of the StorageClass currently in use. Once the updated StorageProfile is applied, Forklift should operate as expected.