Portworx CSI Release Notes

Portworx CSI (PX-CSI) is a lightweight version of the Portworx Enterprise software that you can use with Pure Storage FlashArray and FlashBlade. It allows you to deploy a stack that enables simplified and faster installation, and consumes fewer system resources. By leveraging the existing Portworx Control Plane, PX-CSI allows you to continue benefiting from existing Portworx integrations with Kubernetes to directly access Pure Storage FlashArray Direct Access volumes (FADA) and FlashBlade Direct Access volumes (FBDA).

If you're setting up PX-CSI for the first time, see Install Portworx CSI. If you're already using PX-CSI, upgrade to the latest version. For upgrade instructions, see Upgrade Portworx CSI.

PX-CSI 25.2.0

February 24, 2025

What's New

• FADA Raw Block (RWX)
  PX-CSI now supports FADA Raw Block (RWX), enabling live migration of KubeVirt VMs with high-performance raw block storage. This eliminates filesystem overhead, improves I/O performance, and ensures seamless migration by allowing simultaneous volume access on source and destination nodes. For more information, see Run KubeVirt VMs with raw block RWX volumes for live migration support.

• NVMe-oF/TCP support for FADA
  PX-CSI now supports NVMe-oF/TCP over IPv4, providing high-performance, low-latency storage access for Kubernetes applications using FlashArray LUNs. By leveraging standard TCP/IP, this feature eliminates the need for specialized networking hardware like RoCEv2, making deployment more flexible and cost-effective while maintaining optimal performance. For more information, see Set up NVMe-oF TCP protocol with FlashArray.

  Note: NVMe/TCP is supported with IPv4 protocol in this release. Support for NVMe/TCP with IPv6 will be available in a future release.

• Encryption support for FADA
  PX-CSI now supports FADA Encryption, providing seamless data protection by encrypting information both in transit and at rest on FlashArray storage. Encryption keys are used consistently across the cluster, even with multiple FlashArrays. This feature ensures that data remains secure throughout the process, with encryption handled at the storage level. For more information, see Encrypt FADA volumes.

Resolved Issues

Issue Number	Issue Description	Severity
PWX-41400	Updated oci-monitor image and golang.org/x/crypto package to resolve security vulnerabilities.	Major
PWX-40001	Updated stdlib and golang/go packages to resolve security vulnerabilities.	Major
PWX-41663	If Kubernetes clusters contain FlashBlade volumes migrated from Pure Storage Orchestrator (PSO) clusters, the Portworx process on these systems enters a continuous crash loop, preventing normal volume operations. Affected Versions: 25.1.0	Minor

Known Issues

• PWX-42230: On OpenShift platforms, Forklift requires a manual update to the StorageProfile configuration to function correctly. By default, OpenShift provisions PVCs in filesystem mode, which is incompatible with PX-CSI. Additionally, Forklift does not recognize Portworx as a provider of RWX volumes in Block mode. As a result, VM migrations from VMware to KubeVirt using PX-CSI might fail.

  Workaround: Before starting the migration, manually update the StorageProfile as follows:

  kind: StorageProfile
  metadata:
    name: <storageclass-name>
  spec:
    claimPropertySets:
      - accessModes:
        - ReadWriteMany
        volumeMode: Block

  Replace <storageclass-name> with the name of the StorageClass currently in use. Once the updated StorageProfile is applied, Forklift should operate as expected.

PX-CSI 25.1.0

PX-CSI was initially released on January 9, 2025. For installation instructions, see Install Portworx CSI.

Known Limitations

Portworx CSI has the following limitations when used with FlashArray:

• ActiveCluster, Active Disaster Recovery, and Active Workloads features are not supported.
• For FlashArray Direct Access volumes:
  • Volume import is not supported.
  • CSI ephemeral volumes are not supported.
  • The CreateOperations attribute is not honored.