Portworx Enterprise Release Notes
3.7.0
September 8, 2026
To install or upgrade Portworx Enterprise to version 3.7.0, ensure that your cluster meets all system requirements and is running Operator 26.3.2 or later, Stork 26.4.1 or later, and one of the supported kernels.
New Features
-
Kube Datastore and dynamic pool enhancements (Directed Availability)
Portworx Enterprise expands Kube Datastore (KDS) and dynamic pool capabilities to simplify volume placement and migration for KubeVirt workloads, improve dynamic pool failover, and support larger configurations.-
KDS affinity for volume placement: Use the
kube_datastore_affinityparameter in aStorageClassto place volumes on a specific KDS during provisioning and subsequent storage rebalancing. For more information, see Kube Datastore affinity. -
KDS-aware StorageClasses for KubeVirt VMs: The Portworx Operator automatically creates KDS-aware versions of the default KubeVirt StorageClasses for each KDS, simplifying VM disk placement through Kubernetes-native storage workflows. For more information, see Kube Datastore-aware StorageClasses.
-
KubeVirt VM disk migration between Kube Datastores: Move KubeVirt VM disks between Kube Datastores by selecting the KDS-aware
StorageClassfor the destination KDS, without recreating the VM. For more information, see Migrate KubeVirt VM disks to a different Kube Datastore. -
Faster dynamic pool failover: Fast node-down detection reduces recovery time after unexpected node failures. When liveness and cluster-safety checks confirm that a node is unavailable, Portworx Enterprise typically initiates dynamic pool failover within 7 to 12 seconds, reducing workload disruption. For more information, see Fast node-down detection.
-
Increased validated scale for dynamic pools: Dynamic pools supports up to 5,000 volumes per cluster. A node with a single dynamic pool supports up to 256 volumes. Configurations with multiple dynamic pools supports up to four pools per node and 100 volumes per pool. For more information, see Dynamic Pools for Volumes with Replication Factor 1.
-
-
Enhanced FlashArray and FlashBlade capabilities with the FA/FB driver
Portworx Enterprise now includes an FA/FB driver that provides enhanced storage capabilities for FlashArray Direct Access (FADA), FlashArray File Services, and FlashBlade Direct Access (FBDA) volumes. The FA/FB driver provides FlashArray File Services volumes, static provisioning of existing array storage, FlashBlade snapshots and snapshot policies, cross-array FlashArray snapshot replication, per-node transport selection, parallel volume attachment, GPUDirect Storage, and storage connectivity metrics. For more information, see FlashArray/FlashBlade Driver.importantIf you are upgrading an existing cluster to Portworx Enterprise version 3.7.0 or later, complete the Portworx Enterprise upgrade on all nodes before enabling the FA/FB driver. Verify that every node is running Portworx Enterprise 3.7.0 or later, and then enable the driver.
-
Auto Cordon support for PX-StoreV2
Portworx Enterprise now supports Auto Cordon for PX-StoreV2, helping restore a node and its healthy storage pools after a drive failure takes a pool offline. Auto Cordon moves eligible replicas from the offline pool, cordons the failed pool, and returns the node and its healthy pools online, limiting the impact of the failure. For more information, see Recover Storage Nodes with Auto Cordon. -
Pool Trim for reclaiming unused storage
Portworx Enterprise can now reclaim unused capacity from PX-StoreV2 pools on thin-provisioned storage, making freed capacity available for reuse on the storage backend. Pool Trim is particularly useful for reclaiming capacity from volumes and snapshots deleted before non-blocking device delete (NBDD) was enabled. For more information, see Reclaim Unused Storage with Pool Trim. -
Non-disruptive pool resize
Portworx Enterprise can now expand eligible PX-StoreV2 storage pools without entering pool maintenance mode or restarting Portworx, reducing application disruption during pool expansion. This behavior is enabled by default for eligibleresize-driveoperations, including Autopilot-triggered expansions. For more information, see Non-Disruptive Pool Resize. -
SSL certificate verification for FlashArray and FlashBlade connections
Portworx Enterprise can now verify the identity of FlashArray and FlashBlade management endpoints by validating their SSL certificates. This capability strengthens storage control-path security and helps meet enterprise security and compliance requirements. For more information, see Enable SSL Certificate Verification for FlashArray and FlashBlade. -
Restrict Portworx services to configured network interfaces
Portworx Enterprise can now restrict service listeners to configured management, data, and local loopback addresses instead of listening on all network interfaces. This capability reduces network exposure and supports stronger network segmentation. Enable it by settingPX_DISABLE_WILDCARD_LISTENERSto"true". -
FlashArray realm support for FADA volumes
Portworx Enterprise can now provision FlashArray Direct Access (FADA) volumes in a specific FlashArray realm, providing realm-based placement for Kubernetes workloads. Specify the target realm by using thepure_fa_realmparameter in theStorageClass. Before provisioning volumes, ensure that the required array-level hosts are shared with the target realm. For more information, see Provision volumes on a specific FlashArray realm. -
CloudSnap health improvements
Portworx Enterprise improves CloudSnap reliability and operational visibility, helping you monitor backup health and identify and troubleshoot protection issues more quickly.
Early access features
- Write Zeroes for RWX Block volumes
Portworx Enterprise now supports Write Zeroes for raw block (RWX Block) volumes on new deployments. Write Zeroes avoids physically writing zeroed blocks to thin-provisioned storage, reducing unnecessary network I/O, compute resource consumption, and storage usage. This can improve KubeVirt VM image import and cloning performance, including VMware vSphere migrations with Forklift and CDI imports. For more information, see Write Zeroes for RWX Block Volumes.
Improvements
| Improvement Number | Improvement Description | Component |
|---|---|---|
| PWX-52363 | Portworx Enterprise improves support for KubeVirt VMs by using px-shared-raw-block for root disks and fada-shared-raw-block for the hosted Portworx cluster. This enhancement extends Portworx Enterprise support to hosted clusters running on KubeVirt VMs that use volumes provisioned from a management cluster running Portworx Enterprise. For more information, see How to deploy OpenShift hosted clusters with Portworx | Control Plane |
| PWX-52576 | Portworx Enterprise supports RWX volumes on platforms that do not support NFS 4.0 by allowing the use of NFS 4.1 or NFS 4.2. Portworx first attempts to mount an RWX/SharedV4 volume by using NFS 4.0. If NFS 4.0 is unavailable, Portworx retries with NFS 4.1 and then NFS 4.2. Seamless NFS server failover with NFS 4.1 or NFS 4.2 is not supported in the same way as with NFS 4.0. Workloads restart if the NFS server fails. Existing NFS 4.0 environments continue to use NFS 4.0 and retain the existing seamless failover behavior. To enable RWX support on platforms that do not support NFS 4.0, use either of the following methods:
| Control Plane |
| PWX-53046 | Portworx Enterprise improves troubleshooting for storage I/O timeouts caused by an unresponsive replica node. Previously, timeout messages did not identify the replica node that failed to respond, making it difficult to determine the source of the issue. Portworx Enterprise now raises a ReplicaResponseTimeout alert when a storage I/O request times out waiting for a replica response. The alert identifies the coordinator node, volume, and replica node that did not respond, helping you identify the affected node without analyzing core dumps.To view the alert, run pxctl alerts show --type node. For more information, see Portworx Alerts.The alert helps identify the unresponsive replica node but does not prevent node restarts or resolve the underlying storage backend issue. | Monitoring |
| PWX-55682 | Portworx Enterprise now provides a Grafana dashboard for monitoring Non-Blocking Device Delete (NBDD) operations and space reclamation. The dashboard provides visibility into NBDD configuration and pool-level settings, completed, in-progress, and queued deletion operations, discard throughput and errors, reclaimed capacity, and discard and release durations. Use the dashboard to monitor space reclamation, identify deletion backlogs, and evaluate rate limit and concurrency settings. For more information, see Configure Portworx Monitoring on Kubernetes and Non-Blocking Device Delete. | Monitoring |
Fixes
| Issue Number | Description | Severity |
|---|---|---|
| PWX-55091 | Issue: When a journal device was configured on a partition, a failure during initialization could cause Portworx to restart repeatedly because detaching the old journal drive set failed. The detach operation failed because the journal device holder was a partition rather than an MD device. User Impact: Affected nodes could enter a Portworx restart loop and fail to initialize. Resolution: Portworx Enterprise now removes the partition before detaching the journal drive set, preventing the restart loop. Components: Drive & Pool Management Affected Versions: 3.6.2 or earlier | Critical |
| PWX-55396 | Issue: Portworx did not detach Sharedv4 (NFS) volumes when they were deleted. User Impact: Sharedv4 volumes could remain attached to a node after deletion. Resolution: Portworx Enterprise now detaches Sharedv4 (NFS) volumes when they are deleted. Components: Shared Volumes (NFS) Affected Versions: 3.6.2 or earlier | Critical |
| PWX-56112 | Issue: Stale PXD devices could remain on nodes after the lazy detach of Sharedv4 volumes. If I/O was issued to these devices, they returned I/O errors, and tools such as Node Problem Detector that scan block devices could generate a large number of I/O errors. User Impact: Stale PXD devices could cause repeated I/O errors and excessive logging on affected nodes. Resolution: Portworx Enterprise now scans for and cleans up stale devices every 10 minutes. You can also override the list of encapsulated devices by using the PX_ENCAPSULATED_DEVICES environment variable, which accepts the values all, nfs, encrypted, or none.Components: Shared Volumes (NFS) Affected Versions: 3.5.1 | Critical |
| PWX-43544 | Issue: The Portworx Performance dashboard in Grafana displayed incorrect values in several panels, including NaN latency, volume latency reported in incorrect units, node identifiers shown as IP addresses, and a typo in the read-throughput query. User Impact: The dashboard could display inaccurate performance metrics, making it harder to monitor cluster performance. Resolution: Portworx Enterprise now reports accurate metrics in the affected Performance dashboard panels and queries. Components: Monitoring Affected Versions: 3.6.2 or earlier | Major |
| PWX-45402 | Issue: The px_volume_replica_write and px_volume_replica_read metrics reported incorrect values.User Impact: Per-replica read and write metrics could be inaccurate, affecting volume performance monitoring. Resolution: Portworx Enterprise now reports the px_volume_replica_write and px_volume_replica_read metrics correctly.Components: Monitoring Affected Versions: 3.6.2 or earlier | Major |
| PWX-47726 | Issue: When a FlashArray host was initially created with only a subset of its World Wide Names (WWNs) and additional WWNs became available later, Portworx did not add the new WWNs to the existing host registration. User Impact: Delayed Fibre Channel path recovery could cause duplicate WWN failures during later attach or boot attempts and could trigger a degraded multipath alert. Resolution: Portworx Enterprise now updates the existing FlashArray host registration to include newly available WWNs, avoiding duplicate WWN failures and removing the need for the degraded multipath alert in this scenario. Components: Control Plane Affected Versions: 3.6.2 or earlier | Major |
| PWX-49017 | Issue: When the number of pending deletes in the non-blocking device delete (NBDD) queue exceeded the configured limit, Portworx disabled NBDD on the affected pool but continued to delete the queued volumes and snapshots without pacing them. User Impact: Multiple volumes could be deleted at the same time after NBDD was disabled, which could increase filesystem latency on the affected pool and cause request abort timeouts. Resolution: Portworx Enterprise now pairs NBDD with RelaxedReclaim to pace deletes:
Components: Storage Affected Versions: 3.6.2 or earlier | Major |
| PWX-50021 | Issue: When a CloudSnap operation was stopped after a Portworx restart, or when a queued CloudSnap operation was stopped, the associated local snapshot was not cleaned up. User Impact: Unused local snapshots could accumulate and consume storage capacity. Resolution: Portworx Enterprise now cleans up associated local snapshots when CloudSnap operations are stopped or fail. Components: CloudSnap Affected Versions: 3.6.2 or earlier | Major |
| PWX-50507 | Issue: Before creating a snapshot or clone, Portworx issued an LVM delete operation for the target device without first checking whether the device existed. This could introduce unnecessary processing and delay snapshot or clone creation. User Impact: Snapshot and clone operations could take longer to complete because of unnecessary LVM delete operations. Resolution: Portworx Enterprise now checks whether the target device exists before attempting the LVM delete operation, avoiding unnecessary deletion attempts and improving snapshot and clone creation efficiency. Components: Snaps and clones Affected Versions: 3.6.2 or earlier | Major |
| PWX-50841 | Issue: Portworx repeatedly read node labels to determine whether the cluster was running in disaggregated mode, which was inefficient in large clusters. User Impact: Frequent disaggregated-mode discovery could add load to the Kubernetes API server in large clusters. Resolution: Portworx Enterprise now caches the disaggregated-mode information, reducing repeated node-label reads. Components: Drive & Pool Management Affected Versions: 3.6.2 or earlier | Major |
| PWX-53028 | Issue: Each time Portworx acquired a distributed volume lock, the lock-refresh logic granted a new etcd lease every few seconds without revoking the previous lease. As a result, detached leases remained in the KVDB until they expired. User Impact: Unused etcd leases could accumulate and add load to the KVDB. Resolution: Portworx Enterprise now refreshes the existing lease instead of granting a new lease on each refresh, preventing unnecessary etcd lease accumulation. Components: KVDB Affected Versions: 3.6.2 or earlier | Major |
| PWX-53464 | Issue: CloudSnap status monitoring could fail to capture the final backup status, causing a completed backup to remain indefinitely in the Backup-Active state.User Impact: The affected backup continued to appear active even though the data upload had completed. Subsequent backups for the same source volume could remain queued and fail to start. Resolution: Portworx Enterprise now detects when the final CloudSnap status is no longer available during backup monitoring, updates the affected backup status, cleans up associated resources, and processes queued backups so subsequent backup operations can proceed. Components: CloudSnap Affected Versions: 3.6.2 or earlier | Major |
| PWX-53714 | Issue: Portworx failed to install on nodes where array-level FlashArray hosts were shared into a realm in FlashArray Secure Multi-Tenancy (SMT) configurations. User Impact: Installation could fail in FlashArray SMT configurations that use array-level shared hosts. Resolution: Portworx Enterprise now discovers and uses array-level hosts alongside realm-scoped hosts during deployment in FlashArray SMT configurations. Components: Control Plane Affected Versions: 3.6.2 or earlier | Major |
| PWX-53746 | Issue: An incorrect counter in the messenger component could cause a node to be repeatedly marked as down. User Impact: Affected nodes could be repeatedly marked as down, disrupting cluster operations. Resolution: Portworx Enterprise now tracks the counter correctly in the messenger component, preventing nodes from being repeatedly marked as down. Components: Control Plane Affected Versions: 3.6.2 or earlier | Major |
| PWX-54076 | Issue: A snapshot retry could trigger an assertion in the messenger component, causing Portworx to restart. User Impact: Portworx could restart when a snapshot retry triggered the assertion. Resolution: Portworx Enterprise now handles snapshot retries correctly, preventing the assertion in the messenger component. Components: Snaps and clones Affected Versions: 3.6.2 or earlier | Major |
| PWX-54293 | Issue: When a FlashArray REST API timeout caused a VolumeDiff operation to fail during a FADA CloudSnap backup, the backup could remain indefinitely in the Backup-NotStarted state.User Impact: Affected CloudSnap backups did not complete or transition to a failed state, which could block subsequent backup operations and leave the associated local snapshot behind. Resolution: Portworx Enterprise now marks the affected CloudSnap backup as failed when the VolumeDiff operation fails and cleans up the associated local snapshot. Subsequent backups can proceed normally after connectivity to the FlashArray is restored.Components: Snaps and clones Affected Versions: 3.6.2 or earlier | Major |
| PWX-55680 | Issue: In large clusters, when a storage node was down, every storageless node determined whether the cluster was in disaggregated mode by reading all labels on all nodes. User Impact: This behavior could add significant load to the Kubernetes API server during a storage-node outage. Resolution: Portworx Enterprise now maintains an in-memory cache of the disaggregated-mode information, reducing Kubernetes API server load. Components: Drive & Pool Management Affected Versions: 3.6.2 or earlier | Major |
| PWX-56070 | Issue: When a Portworx node attempted to acquire a lock that was already held by another node, repeated lock acquisition attempts could create unnecessary etcd leases while waiting for the existing lock to be released. User Impact: Frequent lock contention could generate unnecessary KVDB activity and increase load on etcd. Resolution: Portworx Enterprise now checks whether an existing lock has been released before creating a new lease and retrying lock acquisition. This reduces unnecessary lease operations and lowers the load on the KVDB during lock contention. Components: KVDB Affected Versions: 3.6.2 or earlier | Major |
| PWX-56259 | Issue: Portworx could trigger an assertion when a volume attribute was set to nodiscard but the block device was still exported with discards enabled because the discard setting was not propagated correctly.User Impact: The assertion could cause Portworx to restart on affected nodes. Resolution: Portworx Enterprise now propagates the discard or nodiscard setting only on new volume attachments, preventing the assertion.Components: Storage Affected Versions: 3.6.2 or earlier | Major |
| PWX-56617, PWX-56728 | Issue: When uninstalling Portworx by using the UninstallAndDelete strategy in a FlashArray environment with iSCSI or Fibre Channel connectivity, the backend volumes were deleted successfully, but stale multipath maps and SCSI devices could remain on the host.User Impact: Stale host-side storage entries could remain after Portworx was uninstalled, requiring manual cleanup or a node reboot. Resolution: Portworx Enterprise now cleans up the associated multipath maps and SCSI devices from the host when the UninstallAndDelete strategy is used with iSCSI or Fibre Channel connectivity.Components: Install & Uninstall Affected Versions: 3.6.2 | Major |
| PWX-36048 | Issue: During an AKS upgrade, Azure could copy the topology.portworx.io/zone label from one node to another, so a buffer node could inherit a zone label that did not match its actual zone.User Impact: Nodes could report an incorrect zone, which could affect volume provisioning and placement decisions. Resolution: Portworx Enterprise now reconciles the topology.portworx.io/zone label on cloud providers so that nodes retain the correct zone label after an AKS upgrade.Components: Drive & Pool Management Affected Versions: 3.6.2 or earlier | Minor |
| PWX-48871 | Issue: When the px-pure-secret used standard Kubernetes topology labels (topology.kubernetes.io/zone) instead of topology.portworx.io/zone, the FlashArray zone defaulted to default, causing a node-array zone mismatch.User Impact: Volume provisioning could fail because of the node-array zone mismatch. Resolution: Portworx Enterprise now migrates topology.kubernetes.io/* labels to topology.portworx.io/*, so FlashArray topology honors standard Kubernetes topology labels.Components: Control Plane Affected Versions: 3.6.2 or earlier | Minor |
| PWX-49795 | Issue: During a CloudSnap restore, Portworx validated snapshots that were not relevant to the restore operation, which added unnecessary processing. User Impact: CloudSnap restore operations could take longer than necessary in environments with many snapshots. Resolution: Portworx Enterprise now validates only the snapshots that are relevant to the restore, improving restore efficiency. Components: CloudSnap Affected Versions: 3.6.2 or earlier | Minor |
Known issues (Errata)
| Issue Number | Description | Severity |
|---|---|---|
| PWX-52475 | Issue: For KubeVirt virtual machines that use Shared Raw Block (RWX Block) volumes, Portworx cannot report filesystem usage because the filesystem is inside the guest VM, which Portworx cannot inspect. | Major |
| PWX-53654 | Issue: On Dynamic Pools, pool failover can take longer when an RWO volume is attached to a remote node that becomes unavailable. Subsequent attach operations can be delayed while Portworx repeatedly attempts to contact the unavailable node, and pool locks can remain held during these attempts, delaying pool failover. | Major |
| PWX-54529 | Issue: Telemetry is not supported on IPv6-only clusters. On dual-stack clusters, telemetry can also become unhealthy when | Major |
| PWX-56345 | Issue: On KDS clusters with a large number of volumes, a controlled pool failover initiated through the CLI can take significantly longer to complete. The delay increases with the number of volumes in the affected pool because pool deactivation and activation operations, including device cleanup and LVM activation, require additional processing for each volume. | Major |
| PWX-56840 | Issue: Pool resize operations can take longer on pools with multiple drives, particularly when the journal is configured on the data pool. The resize duration increases with the number of drives because Portworx performs multiple storage-device operations for each drive during the resize. | Minor |
| PWX-57002 | Issue: On Portworx Enterprise clusters configured with multiple FlashArrays, a FADA volume can be created on more than one FlashArray if a volume creation request times out and Portworx retries the request on another backend. Subsequent operations on the affected volume fail because Portworx detects duplicate volumes with the same name. | Major |
| PWX-57247 | Issue: Under abnormal cluster conditions, such as high KVDB latency, a Sharedv4 service volume failover can be triggered. If the volume attaches to the new NFS server but the mount and export operation does not complete, existing client mounts can become stale. Pods that use the affected volume can then remain in the | Major |
| PWX-57381 | Issue: If you enable the FA/FB driver while a FlashArray Direct Access (FADA) cloud snapshot backup is in progress, Portworx Enterprise stops applying KVDB updates to FADA volumes, including the clone created by the backup. Portworx cannot delete the previous backup because the legacy delete path depends on a KVDB update, and the FA/FB driver cannot locate a volume that has no PVC. As a result, the previous backup remains on the FlashArray as an orphaned volume. | Major |
| PWX-57434 | Issue: During an uncontrolled KDS pool failover, the failover can be delayed when the source node goes down while holding the pool ConfigMap lock. The target coordinator must wait for the stale lock's approximately 15-second TTL to expire before it can continue. It can then spend additional time waiting for the pool write lock while in-flight volume operations complete. These waits can add approximately 20 seconds before pool deactivation and activation begin. | Major |
| PWX-57452 | Issue: During KDS pool failover on PX-StoreV2 clusters, pool activation can occasionally take significantly longer than expected. The delay occurs primarily during LVM activation on the target node. In some cases, LVM operations such as | Major |
| PWX-57527 | Issue: The Kube Datastore (KDS) VM count does not decrease after you delete a KubeVirt virtual machine when its DataVolumes, PVCs, and Portworx volumes are retained. The retained Portworx volumes still contain labels for the deleted VM's name and UID, and KDS counts the VM metadata found on the retained volumes without verifying that the associated Kubernetes VM object still exists. | Major |
| PWX-57757 | Issue: When an incremental cloud backup has no changed data, Portworx retains its local snapshot as the base for the next incremental backup. After a subsequent backup no longer requires this snapshot, Portworx might not delete it promptly, leaving the snapshot on the storage pool longer than necessary. | Major |
| PWX-57878 | Issue: In Portworx Enterprise deployments where the FA/FB driver is not enabled, concurrent cloudsnap operations can create duplicate Portworx IDs for the same local cloudsnap clone. When Portworx removes the duplicate ID, it can also delete the corresponding volume on the FlashArray while leaving the original KVDB entry behind. If you later enable the FA/FB driver, the metadata migration can fail because the KVDB entry references a backend volume that no longer exists. | Major |
| PWX-57891 | Issue: During large-scale NFS cloudsnap operations that use a 100 MB object size, checksum processing can consume significant memory. Because checksum memory is allocated dynamically, concurrent backup activity can increase Portworx memory usage enough to cause memory pressure and process termination on nodes with limited memory. | Major |
| PWX-57895 | Issue: If a pool expansion using | Major |