v1.9.0

Changelog v1.9.0

Features

• [core] CLI lifecycle commands (start, stop, restart, evict, migrate) now support multiple VM targets, --all flag, --label-selector flag for label-based targeting, and --yes flag for non-interactive confirmation. #2412
• [core] Compatible VirtualMachineOperation resources can now supersede another active operation on the same VM. #2338
• [core] Added the Uptime column to VirtualMachine resources, showing the time since the VM started. #2279
• [vm] The VM status now includes a No bootable device message when the VM cannot find a bootable disk to start. #2404
• [vm] Add domain jobs and block-jobs info subcommands to vlctl. #2280
• [vm] Added the ability to change coreFraction on a running VM without a restart. The new value is applied via live migration. #2210
• [vm] Added the ability to attach additional network interfaces without a restart via the virtual machine's .spec.networks. #2187
• [vm] System virtual machine resources (pods with d8v-hp- and d8v-vm- prefixes) now run as the deckhouse user, without root privileges. #2097
• [vm] A restart is no longer required to attach and detach virtual disks and images via the virtual machine's .spec.blockDeviceRefs:
  • Works for new virtual machines starting from v1.9.0.
  • For previously created virtual machines, a restart is required to enable this behavior. #2033

Fixes

• [core] Better handling Windows guests: start and migration should work in clusters with frequent CPU frequencies drifts #2345
• [module] Fixed an issue where invalid virtualization module ModuleConfig settings could block the Deckhouse queue. #2246
• [module] Fixed duplicate series on the Virtualization / Overview dashboard. #2189
• [vd] Time spent in the WaitForFirstConsumer phase is no longer included in .status.stats.creationDuration.totalProvisioning of virtual disks. #2379
• [vd] Allow ingress from virtualization namespace to importer pods #2356
• [vm] Fixed disk update for stopped VMs with WaitForFirstConsumer storage class. Previously, when a VM was stopped and disks were changed, the KVVM was not updated, causing the VM to get stuck in starting phase. #2407
• [vm] Fix VM migration failure caused by incorrect target disk size for filesystem-backed hotplug volumes. #2402
• [vm] Fix possible scheduling problems after changing vmclass from Discovery type to Model type. #2352
• [vm] Fixed an issue with VM migration cancellation that prevented new migrations from starting. #2282

Chore

• [api] Removed the deprecated VirtualMachineRestore resource. Use VirtualMachineOperation with the Clone or Restore type, or VirtualMachineSnapshotOperation instead. #2368

For more information, see the changelog and minor version release changes.

v1.8.3

Changelog v1.8.3

Fixes

• [vm] Fixed an issue that blocked virtual machine migration for VMs with additional network interfaces. #2427
• [vm] Fixed duplicate service pods (d8v-hp-*) when hot-unplugging disks from VMs. #2422

For more information, see the changelog and minor version release changes.

v1.8.2

Changelog v1.8.2

Chore

• [core] Fixed vulnerability #2343:
  • CVE-2026-29181
  • CVE-2026-33811
  • CVE-2026-33814
  • CVE-2026-39820
  • CVE-2026-39823
  • CVE-2026-39825
  • CVE-2026-39826
  • CVE-2026-39836
  • CVE-2026-41520
  • CVE-2026-42499

For more information, see the changelog and minor version release changes.

v1.7.2

Changelog v1.7.2

Chore

• [core] Fixed vulnerability #2342:
  • CVE-2026-29181
  • CVE-2026-33811
  • CVE-2026-33814
  • CVE-2026-39820
  • CVE-2026-39823
  • CVE-2026-39825
  • CVE-2026-39826
  • CVE-2026-39836
  • CVE-2026-41520
  • CVE-2026-42499

For more information, see the changelog and minor version release changes.

v1.8.1

Changelog v1.8.1

Fixes

• [module] Added missing RBAC permissions for virtualization resources, including virtual machine MAC addresses, snapshot operations, and node USB devices. #2276
• [vd] Fixed a potential issue where a virtual disk could get stuck in the Provisioning state when using a storage class with the WaitForFirstConsumer mode. #2292

For more information, see the changelog and minor version release changes.

v1.8.0

Changelog v1.8.0

Features

• [vm] Added the progress field to the status of VirtualMachineOperation resources with the Evict and Migrate types to show operation progress. The corresponding PROGRESS column is displayed when running d8 k get vmop #2182
• [vm] Added the ability to change the number of CPUs in a virtual machine without manually stopping it. The new value is applied via live migration. To enable this functionality, add HotplugCPUWithLiveMigration to .spec.settings.featureGates in the ModuleConfig of the virtualization module. #2147
• [vm] Added initial support for changing virtual machine memory without manually stopping the virtual machine. The new .spec.memory value is applied via live migration. To enable this functionality, add HotplugMemoryWithLiveMigration to .spec.settings.featureGates in the ModuleConfig of the virtualization module. #2110

Fixes

• [api] When uploading disks and images with the Upload type, the WaitForUserUpload phase no longer occurs prematurely while the resource is not yet ready for upload. #2178
• [core] Added automatic cleanup of NodeUSBDevice resources that are absent on the node and are not assigned to a namespace or project. #2220
• [vm] Fixed an issue with an unfrozen filesystem during virtual machine snapshot creation if the freeze occurred during migration. #2225
• [vm] Fixed removal of the Main network from a virtual machine: the virtual machine no longer uses an IP address from the virtualization CIDR after the network is removed. #2185
• [vm] Optimized virtual machine migration: it now uses hostNetwork, allowing the host MTU to be used instead of the pod MTU. #2174
• [vmsnapshot] Fixed snapshot creation for a virtual machine without the Main network. #2176

Chore

• [core] Fix vulnerability CVE-2026-39883. #2200
• [core] Fixed vulnerabilities CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289 #2196
• [core] Fixed vulnerabilities CVE-2026-34986. #2188
• [core] Fixed vulnerabilities CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-33186, CVE-2026-34040, CVE-2026-33997. #2175

For more information, see the changelog and minor version release changes.

v1.7.1

Changelog v1.7.1

Know before update

• Action is required to update the firmware on virtual machines with a connected USB device (a corresponding migration prompt will appear in the VM status):

  • either disconnect the USB device and migrate the virtual machine;
  • or restart the virtual machine.

  Until the action is taken, the virtual machine will continue running, but it cannot be migrated.
  After completing the action, the virtual machine will be updated to the current firmware version and will be ready for migration again.

Fixes

• [vm] Action is required to update the firmware on virtual machines with a connected USB device. #2166

Chore

• [core] Fixed vulnerability:
  • CVE-2026-32283
  • CVE-2026-27139
  • CVE-2026-32289
  • CVE-2026-32288
  • CVE-2026-32281
  • CVE-2026-27142
  • CVE-2026-33997
  • CVE-2026-33726
  • CVE-2026-32282
  • CVE-2026-32280
  • CVE-2026-25679
  • CVE-2026-34040
  • CVE-2026-34986
  • CVE-2026-39883
  • CVE-2026-33186 #2219

For more information, see the changelog and minor version release changes.

v1.6.3

Changelog v1.6.3

Chore

• [core] Fixed vulnerabilities:
  • CVE-2026-32283
  • CVE-2026-27139
  • CVE-2026-32289
  • CVE-2026-32288
  • CVE-2026-32281
  • CVE-2026-27142
  • CVE-2026-33997
  • CVE-2026-33726
  • CVE-2026-32282
  • CVE-2026-32280
  • CVE-2026-25679
  • CVE-2026-34040
  • CVE-2026-34986
  • CVE-2026-39883
  • CVE-2026-33186 #2218

For more information, see the changelog and minor version release changes.

v1.7.0

Changelog v1.7.0

Features

• [vm] Reduced USB device downtime during virtual machine migration. #2098
• [vm] Added a garbage collector for completed and failed virtual machine pods:
  • Pods older than 24 hours are deleted.
  • No more than 2 completed pods are retained. #2091

Fixes

• [core] Fixed validation for the AlwaysForced virtual machine migration policy: VirtualMachineOperation resources with the Evict or Migrate type without explicit force=true are now rejected for this policy. #2120
• [core] Fixed the creation of block devices from VMDK files (especially for VMDKs in the streamOptimized format used in exports from VMware). #2065
• [vm] Block devices can now be attached and detached even if the virtual machine is running on a cordoned node. #2163
• [vm] Fixed virtual machine eviction during node drain: pods responsible for block device attachments are no longer removed from a cordoned node before virtual machine migration is complete. #2153
• [vm] Fixed double storage quota consumption during migration of a virtual machine with local storage. #2148
• [vm] Fixed an issue where a virtual machine could get stuck in the Maintenance state during restore from a snapshot. #2144
• [vm] Stabilized the operation of USB devices for virtualization on Deckhouse version ≥1.76 and Kubernetes version ≥1.33. #2137
• [vm] Fixed the detection of USB devices on the host: previously, there was a possibility of duplicate USB devices appearing. #2122

For more information, see the changelog and minor version release changes.

v1.6.2

Changelog v1.6.2

Fixes

• [module] The virtualization module requires Deckhouse Kubernetes Platform version 1.74.2 or later. This version includes a fix for quota validation when creating disks. #2133

For more information, see the changelog and minor version release changes.