In v1.18, Velero is capable to process multiple backups concurrently. This is a significant usability improvement, especially for multiple tenants or multiple users case, backups submitted from different users could run their backups simultaneously without interfering with each other.

Check design https://github.com/vmware-tanzu/velero/blob/main/design/Implemented/concurrent-backup-processing.md for more details.

Cache volume for data movers

In v1.18, Velero allows users to configure cache volumes for data mover pods during restore for CSI snapshot data movement and fs-backup. This brings below benefits:

Solve the problem that data mover pods fail to when pod's ephemeral disk is limited
Solve the problem that multiple data mover pods fail to run concurrently in one node when the node's ephemeral disk is limited
Working together with backup repository's cache limit configuration, cache volume with appropriate size helps to improve the restore throughput

Check design https://github.com/vmware-tanzu/velero/blob/main/design/Implemented/backup-repo-cache-volume.md for more details.

Incremental size for data movers

In v1.18, Velero allows users to observe the incremental size of data movers backups for CSI snapshot data movement and fs-backup, so that users could visually see the data reduction due to incremental backup.

Wildcard support for namespaces

In v1.18, Velero allows to use Glob regular expressions for namespace filters during backup and restore, so that users could filter namespaces in a batch manner.

VolumePolicy for PVC phase

In v1.18, Velero VolumePolicy supports actions by PVC phase, which help users to do special operations for PVCs with a specific phase, e.g., skip PVCs in Pending/Lost status from the backup.

Scalability and Resiliency improvements

Prevent Velero server OOM Kill for large backup repositories

In v1.18, some backup repository operations are delay executed out of Velero server, so Velero server won't be OOM Killed.

Performance improvement for VolumePolicy

In v1.18, VolumePolicy is enhanced for large number of pods/PVCs so that the performance is significantly improved.

Events for data mover pod diagnostic

In v1.18, events are recorded into data mover pod diagnostic, which allows user to see more information for troubleshooting when the data mover pod fails.

Runtime and dependencies

Golang runtime: 1.25.7
kopia: 0.22.3

Limitations/Known issues

Breaking changes

Deprecation of PVC selected node feature

According to Velero deprecation policy, PVC selected node feature is deprecated in v1.18. Velero could appropriately handle PVC's selected-node annotation, so users don't need to do anything particularly.

All Changes

Remove backup from running list when backup fails validation (#9498, @sseago)
Maintenance Job only uses the first element of the LoadAffinity array (#9494, @blackpiglet)
Fix issue #9478, add diagnose info on expose peek fails (#9481, @Lyndon-Li)
Add Role, RoleBinding, ClusterRole, and ClusterRoleBinding in restore sequence. (#9474, @blackpiglet)
Add maintenance job and data mover pod's labels and annotations setting. (#9452, @blackpiglet)
Fix plugin init container names exceeding DNS-1123 limit (#9445, @mpryc)
Add PVC-to-Pod cache to improve volume policy performance (#9441, @shubham-pampattiwar)
Remove VolumeSnapshotClass from CSI B/R process. (#9431, @blackpiglet)
Use hookIndex for recording multiple restore exec hooks. (#9366, @blackpiglet)
Sanitize Azure HTTP responses in BSL status messages (#9321, @shubham-pampattiwar)
Remove labels associated with previous backups (#9206, @Joeavaikath)
Add VolumePolicy support for PVC Phase conditions to allow skipping Pending PVCs (#9166, @claude)
feat: Enhance BackupStorageLocation with Secret-based CA certificate support (#9141, @kaovilai)
Add --apply flag to install command, allowing usage of Kubernetes apply to make changes to existing installs (#9132, @mjnagel)
Fix issue #9194, add doc for GOMAXPROCS behavior change (#9420, @Lyndon-Li)
Apply volume policies to VolumeGroupSnapshot PVC filtering (#9419, @shubham-pampattiwar)
Fix issue #9276, add doc for cache volume support (#9418, @Lyndon-Li)
Add Prometheus metrics for maintenance jobs (#9414, @shubham-pampattiwar)
Fix issue #9400, connect repo first time after creation so that init params could be written (#9407, @Lyndon-Li)
Cache volume for PVR (#9397, @Lyndon-Li)
Cache volume support for DataDownload (#9391, @Lyndon-Li)
don't copy securitycontext from first container if configmap found (#9389, @sseago)
Refactor repo provider interface for static configuration (#9379, @Lyndon-Li)
Fix issue #9365, prevent fake completion notification due to multiple update of single PVR (#9375, @Lyndon-Li)
Add cache volume configuration (#9370, @Lyndon-Li)
Track actual resource names for GenerateName in restore status (#9368, @shubham-pampattiwar)
Fix managed fields patch for resources using GenerateName (#9367, @shubham-pampattiwar)
Support cache volume for generic restore exposer and pod volume exposer (#9362, @Lyndon-Li)
Add incrementalSize to DU/PVB for reporting new/changed size (#9357, @sseago)
Add snapshotSize for DataDownload, PodVolumeRestore (#9354, @Lyndon-Li)
Add cache dir configuration for udmrepo (#9353, @Lyndon-Li)
Fix the Job build error when BackupReposiotry name longer than 63. (#9350, @blackpiglet)
Add cache configuration to VGDP (#9342, @Lyndon-Li)
Fix issue #9332, add bytesDone for cache files (#9333, @Lyndon-Li)
Fix typos in documentation (#9329, @T4iFooN-IX)
Concurrent backup processing (#9307, @sseago)
VerifyJSONConfigs verify every elements in Data. (#9302, @blackpiglet)
Fix issue #9267, add events to data mover prepare diagnostic (#9296, @Lyndon-Li)
Add option for privileged fs-backup pod (#9295, @sseago)
Fix issue #9193, don't connect repo in repo controller (#9291, @Lyndon-Li)
Implement concurrency control for cache of native VolumeSnapshotter plugin. (#9281, @0xLeo258)
Fix issue #7904, remove the code and doc for PVC node selection (#9269, @Lyndon-Li)
Fix schedule controller to prevent backup queue accumulation during extended blocking scenarios by properly handling empty backup phases (#9264, @shubham-pampattiwar)
Fix repository maintenance jobs to inherit allowlisted tolerations from Velero deployment (#9256, @shubham-pampattiwar)
Implement wildcard namespace pattern expansion for backup namespace includes/excludes. This change adds support for wildcard patterns (*, ?, [abc], {a,b,c}) in namespace includes and excludes during backup operations (#9255, @Joeavaikath)
Protect VolumeSnapshot field from race condition during multi-thread backup (#9248, @0xLeo258)
Update AzureAD Microsoft Authentication Library to v1.5.0 (#9244, @priyansh17)
Get pod list once per namespace in pvc IBA (#9226, @sseago)
Fix issue #7725, add design for backup repo cache configuration (#9148, @Lyndon-Li)
Fix issue #9229, don't attach backupPVC to the source node (#9233, @Lyndon-Li)
feat: Permit specifying annotations for the BackupPVC (#9173, @clementnuss)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [vmware-tanzu/velero](https://github.com/vmware-tanzu/velero) | minor | `1.17.2` → `1.18.0` | --- ### Release Notes <details> <summary>vmware-tanzu/velero (vmware-tanzu/velero)</summary> ### [`v1.18.0`](https://github.com/vmware-tanzu/velero/releases/tag/v1.18.0) [Compare Source](https://github.com/vmware-tanzu/velero/compare/v1.17.2...v1.18.0) #### v1.18 ##### Download <https://github.com/vmware-tanzu/velero/releases/tag/v1.18.0> ##### Container Image `velero/velero:v1.18.0` ##### Documentation <https://velero.io/docs/v1.18/> ##### Upgrading <https://velero.io/docs/v1.18/upgrade-to-1.18/> ##### Highlights ##### Concurrent backup In v1.18, Velero is capable to process multiple backups concurrently. This is a significant usability improvement, especially for multiple tenants or multiple users case, backups submitted from different users could run their backups simultaneously without interfering with each other. Check design <https://github.com/vmware-tanzu/velero/blob/main/design/Implemented/concurrent-backup-processing.md> for more details. ##### Cache volume for data movers In v1.18, Velero allows users to configure cache volumes for data mover pods during restore for CSI snapshot data movement and fs-backup. This brings below benefits: - Solve the problem that data mover pods fail to when pod's ephemeral disk is limited - Solve the problem that multiple data mover pods fail to run concurrently in one node when the node's ephemeral disk is limited - Working together with backup repository's cache limit configuration, cache volume with appropriate size helps to improve the restore throughput Check design <https://github.com/vmware-tanzu/velero/blob/main/design/Implemented/backup-repo-cache-volume.md> for more details. ##### Incremental size for data movers In v1.18, Velero allows users to observe the incremental size of data movers backups for CSI snapshot data movement and fs-backup, so that users could visually see the data reduction due to incremental backup. ##### Wildcard support for namespaces In v1.18, Velero allows to use Glob regular expressions for namespace filters during backup and restore, so that users could filter namespaces in a batch manner. ##### VolumePolicy for PVC phase In v1.18, Velero VolumePolicy supports actions by PVC phase, which help users to do special operations for PVCs with a specific phase, e.g., skip PVCs in Pending/Lost status from the backup. ##### Scalability and Resiliency improvements ##### Prevent Velero server OOM Kill for large backup repositories In v1.18, some backup repository operations are delay executed out of Velero server, so Velero server won't be OOM Killed. ##### Performance improvement for VolumePolicy In v1.18, VolumePolicy is enhanced for large number of pods/PVCs so that the performance is significantly improved. ##### Events for data mover pod diagnostic In v1.18, events are recorded into data mover pod diagnostic, which allows user to see more information for troubleshooting when the data mover pod fails. ##### Runtime and dependencies Golang runtime: 1.25.7\ kopia: 0.22.3 ##### Limitations/Known issues ##### Breaking changes ##### Deprecation of PVC selected node feature According to [Velero deprecation policy](https://github.com/vmware-tanzu/velero/blob/main/GOVERNANCE.md#deprecation-policy), PVC selected node feature is deprecated in v1.18. Velero could appropriately handle PVC's selected-node annotation, so users don't need to do anything particularly. ##### All Changes - Remove backup from running list when backup fails validation ([#9498](https://github.com/vmware-tanzu/velero/issues/9498), [@sseago](https://github.com/sseago)) - Maintenance Job only uses the first element of the LoadAffinity array ([#9494](https://github.com/vmware-tanzu/velero/issues/9494), [@blackpiglet](https://github.com/blackpiglet)) - Fix issue [#9478](https://github.com/vmware-tanzu/velero/issues/9478), add diagnose info on expose peek fails ([#9481](https://github.com/vmware-tanzu/velero/issues/9481), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Add Role, RoleBinding, ClusterRole, and ClusterRoleBinding in restore sequence. ([#9474](https://github.com/vmware-tanzu/velero/issues/9474), [@blackpiglet](https://github.com/blackpiglet)) - Add maintenance job and data mover pod's labels and annotations setting. ([#9452](https://github.com/vmware-tanzu/velero/issues/9452), [@blackpiglet](https://github.com/blackpiglet)) - Fix plugin init container names exceeding DNS-1123 limit ([#9445](https://github.com/vmware-tanzu/velero/issues/9445), [@mpryc](https://github.com/mpryc)) - Add PVC-to-Pod cache to improve volume policy performance ([#9441](https://github.com/vmware-tanzu/velero/issues/9441), [@shubham-pampattiwar](https://github.com/shubham-pampattiwar)) - Remove VolumeSnapshotClass from CSI B/R process. ([#9431](https://github.com/vmware-tanzu/velero/issues/9431), [@blackpiglet](https://github.com/blackpiglet)) - Use hookIndex for recording multiple restore exec hooks. ([#9366](https://github.com/vmware-tanzu/velero/issues/9366), [@blackpiglet](https://github.com/blackpiglet)) - Sanitize Azure HTTP responses in BSL status messages ([#9321](https://github.com/vmware-tanzu/velero/issues/9321), [@shubham-pampattiwar](https://github.com/shubham-pampattiwar)) - Remove labels associated with previous backups ([#9206](https://github.com/vmware-tanzu/velero/issues/9206), [@Joeavaikath](https://github.com/Joeavaikath)) - Add VolumePolicy support for PVC Phase conditions to allow skipping Pending PVCs ([#9166](https://github.com/vmware-tanzu/velero/issues/9166), [@claude](https://github.com/claude)) - feat: Enhance BackupStorageLocation with Secret-based CA certificate support ([#9141](https://github.com/vmware-tanzu/velero/issues/9141), [@kaovilai](https://github.com/kaovilai)) - Add `--apply` flag to `install` command, allowing usage of Kubernetes apply to make changes to existing installs ([#9132](https://github.com/vmware-tanzu/velero/issues/9132), [@mjnagel](https://github.com/mjnagel)) - Fix issue [#9194](https://github.com/vmware-tanzu/velero/issues/9194), add doc for GOMAXPROCS behavior change ([#9420](https://github.com/vmware-tanzu/velero/issues/9420), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Apply volume policies to VolumeGroupSnapshot PVC filtering ([#9419](https://github.com/vmware-tanzu/velero/issues/9419), [@shubham-pampattiwar](https://github.com/shubham-pampattiwar)) - Fix issue [#9276](https://github.com/vmware-tanzu/velero/issues/9276), add doc for cache volume support ([#9418](https://github.com/vmware-tanzu/velero/issues/9418), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Add Prometheus metrics for maintenance jobs ([#9414](https://github.com/vmware-tanzu/velero/issues/9414), [@shubham-pampattiwar](https://github.com/shubham-pampattiwar)) - Fix issue [#9400](https://github.com/vmware-tanzu/velero/issues/9400), connect repo first time after creation so that init params could be written ([#9407](https://github.com/vmware-tanzu/velero/issues/9407), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Cache volume for PVR ([#9397](https://github.com/vmware-tanzu/velero/issues/9397), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Cache volume support for DataDownload ([#9391](https://github.com/vmware-tanzu/velero/issues/9391), [@Lyndon-Li](https://github.com/Lyndon-Li)) - don't copy securitycontext from first container if configmap found ([#9389](https://github.com/vmware-tanzu/velero/issues/9389), [@sseago](https://github.com/sseago)) - Refactor repo provider interface for static configuration ([#9379](https://github.com/vmware-tanzu/velero/issues/9379), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Fix issue [#9365](https://github.com/vmware-tanzu/velero/issues/9365), prevent fake completion notification due to multiple update of single PVR ([#9375](https://github.com/vmware-tanzu/velero/issues/9375), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Add cache volume configuration ([#9370](https://github.com/vmware-tanzu/velero/issues/9370), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Track actual resource names for GenerateName in restore status ([#9368](https://github.com/vmware-tanzu/velero/issues/9368), [@shubham-pampattiwar](https://github.com/shubham-pampattiwar)) - Fix managed fields patch for resources using GenerateName ([#9367](https://github.com/vmware-tanzu/velero/issues/9367), [@shubham-pampattiwar](https://github.com/shubham-pampattiwar)) - Support cache volume for generic restore exposer and pod volume exposer ([#9362](https://github.com/vmware-tanzu/velero/issues/9362), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Add incrementalSize to DU/PVB for reporting new/changed size ([#9357](https://github.com/vmware-tanzu/velero/issues/9357), [@sseago](https://github.com/sseago)) - Add snapshotSize for DataDownload, PodVolumeRestore ([#9354](https://github.com/vmware-tanzu/velero/issues/9354), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Add cache dir configuration for udmrepo ([#9353](https://github.com/vmware-tanzu/velero/issues/9353), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Fix the Job build error when BackupReposiotry name longer than 63. ([#9350](https://github.com/vmware-tanzu/velero/issues/9350), [@blackpiglet](https://github.com/blackpiglet)) - Add cache configuration to VGDP ([#9342](https://github.com/vmware-tanzu/velero/issues/9342), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Fix issue [#9332](https://github.com/vmware-tanzu/velero/issues/9332), add bytesDone for cache files ([#9333](https://github.com/vmware-tanzu/velero/issues/9333), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Fix typos in documentation ([#9329](https://github.com/vmware-tanzu/velero/issues/9329), [@T4iFooN-IX](https://github.com/T4iFooN-IX)) - Concurrent backup processing ([#9307](https://github.com/vmware-tanzu/velero/issues/9307), [@sseago](https://github.com/sseago)) - VerifyJSONConfigs verify every elements in Data. ([#9302](https://github.com/vmware-tanzu/velero/issues/9302), [@blackpiglet](https://github.com/blackpiglet)) - Fix issue [#9267](https://github.com/vmware-tanzu/velero/issues/9267), add events to data mover prepare diagnostic ([#9296](https://github.com/vmware-tanzu/velero/issues/9296), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Add option for privileged fs-backup pod ([#9295](https://github.com/vmware-tanzu/velero/issues/9295), [@sseago](https://github.com/sseago)) - Fix issue [#9193](https://github.com/vmware-tanzu/velero/issues/9193), don't connect repo in repo controller ([#9291](https://github.com/vmware-tanzu/velero/issues/9291), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Implement concurrency control for cache of native VolumeSnapshotter plugin. ([#9281](https://github.com/vmware-tanzu/velero/issues/9281), [@0xLeo258](https://github.com/0xLeo258)) - Fix issue [#7904](https://github.com/vmware-tanzu/velero/issues/7904), remove the code and doc for PVC node selection ([#9269](https://github.com/vmware-tanzu/velero/issues/9269), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Fix schedule controller to prevent backup queue accumulation during extended blocking scenarios by properly handling empty backup phases ([#9264](https://github.com/vmware-tanzu/velero/issues/9264), [@shubham-pampattiwar](https://github.com/shubham-pampattiwar)) - Fix repository maintenance jobs to inherit allowlisted tolerations from Velero deployment ([#9256](https://github.com/vmware-tanzu/velero/issues/9256), [@shubham-pampattiwar](https://github.com/shubham-pampattiwar)) - Implement wildcard namespace pattern expansion for backup namespace includes/excludes. This change adds support for wildcard patterns (\*, ?, \[abc], {a,b,c}) in namespace includes and excludes during backup operations ([#9255](https://github.com/vmware-tanzu/velero/issues/9255), [@Joeavaikath](https://github.com/Joeavaikath)) - Protect VolumeSnapshot field from race condition during multi-thread backup ([#9248](https://github.com/vmware-tanzu/velero/issues/9248), [@0xLeo258](https://github.com/0xLeo258)) - Update AzureAD Microsoft Authentication Library to v1.5.0 ([#9244](https://github.com/vmware-tanzu/velero/issues/9244), [@priyansh17](https://github.com/priyansh17)) - Get pod list once per namespace in pvc IBA ([#9226](https://github.com/vmware-tanzu/velero/issues/9226), [@sseago](https://github.com/sseago)) - Fix issue [#7725](https://github.com/vmware-tanzu/velero/issues/7725), add design for backup repo cache configuration ([#9148](https://github.com/vmware-tanzu/velero/issues/9148), [@Lyndon-Li](https://github.com/Lyndon-Li)) - Fix issue [#9229](https://github.com/vmware-tanzu/velero/issues/9229), don't attach backupPVC to the source node ([#9233](https://github.com/vmware-tanzu/velero/issues/9233), [@Lyndon-Li](https://github.com/Lyndon-Li)) - feat: Permit specifying annotations for the BackupPVC ([#9173](https://github.com/vmware-tanzu/velero/issues/9173), [@clementnuss](https://github.com/clementnuss)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

Johnny5 added 1 commit

2026-03-07 01:01:02 +01:00