SUSE Virtualization v1.8.1 Release Notes
This release introduces several features, enhancements, and bug fixes that improve system quality and the overall user experience. The documentation is available at https://documentation.suse.com/cloudnative/virtualization/v1.8/en/introduction/overview.html.
Downloads
AMD64
Full ISO
-
https://releases.rancher.com/harvester/v1.8.1/harvester-v1.8.1-amd64.iso
-
https://releases.rancher.com/harvester/v1.8.1/harvester-v1.8.1-vmlinuz-amd64
-
https://releases.rancher.com/harvester/v1.8.1/harvester-v1.8.1-initrd-amd64
-
https://releases.rancher.com/harvester/v1.8.1/harvester-v1.8.1-rootfs-amd64.squashfs
-
https://releases.rancher.com/harvester/v1.8.1/harvester-v1.8.1-amd64.sha512
ARM64
-
https://releases.rancher.com/harvester/v1.8.1/harvester-v1.8.1-arm64.iso
-
https://releases.rancher.com/harvester/v1.8.1/harvester-v1.8.1-vmlinuz-arm64
-
https://releases.rancher.com/harvester/v1.8.1/harvester-v1.8.1-initrd-arm64
-
https://releases.rancher.com/harvester/v1.8.1/harvester-v1.8.1-rootfs-arm64.squashfs
-
https://releases.rancher.com/harvester/v1.8.1/harvester-v1.8.1-arm64.sha512
-
https://releases.rancher.com/harvester/v1.8.1/version-arm64.yaml
Installation
SUSE Virtualization can be installed using the ISO image, a bootable USB drive, and PXE boot. For more information, see the Installation section of the documentation.
Upgrades
SUSE Virtualization only allows upgrades from supported versions. For more information about upgrade paths and procedures, see Upgrades.
|
When upgrading from v1.7 to v1.8, you may encounter an operating system image corruption issue if all of the following conditions are met:
For more information, see issue #10687. |
Highlights
Standalone Upgrade Manager
SUSE Virtualization v1.8 decouples upgrade logic from the core binary into a standalone Upgrade Manager. This architectural change enables faster delivery of upgrade-related features and bug fixes without waiting for full release cycles. The upgrade lifecycle is now managed across three specialized components: upgrade-shim (early-stage preparation), upgrade-repo (metadata and image hosting), and upgrade-manager (custom lifecycle controllers). This modular approach improves overall system maintainability and upgrade reliability.
Fully supported features
In-place storage live migration
In SUSE Virtualization v1.8, you can migrate all or selected virtual machine disks between different storage providers (such as SUSE Storage or external CSI volumes) without downtime. The guest operating system remains unaware of the storage transfer, ensuring minimal disruption to active workloads. This capability includes full UI and API support with real-time progress tracking, as well as safety checks that verify destination capacity and temporarily block conflicting operations (such as live migration) until the transfer completes.
Live CD-ROM insertion and ejection
SUSE Virtualization v1.8 introduces dynamic CD-ROM media management, allowing you to insert or eject ISO images while a virtual machine is running. Although adding or removing the CD-ROM drive device itself still requires a virtual machine reboot, mounting or unmounting ISO media within an existing drive is completely seamless. Additionally, virtual machines with mounted CD-ROM ISOs remain fully live-migratable across nodes.
Optimized SUSE Storage resource reservations
Harvester v1.8 introduces a configuration setting that allows you to manually adjust Instance Manager resource reservations. If your cluster primarily uses third-party storage, you can reduce the default CPU and memory allocated to SUSE Storage. This optimization frees up cluster resources for other workloads when SUSE Storage is only needed for core system functions, such as image management and upgrades.
Pod Security Admission (PSA) support
SUSE Virtualization v1.8 supports Pod Security Admission (PSA) to enforce Pod Security Standards (PSS). Built-in Kubernetes admission controllers enforce these standards across SUSE Virtualization system namespaces, ensuring that core workloads remain unaffected and that a seamless upgrade path exists from non-PSA to PSA-enabled images. User namespaces remain unenforced by default, preserving flexibility for you to define custom security levels or independently deploy policy engines (such as SUSE Security Admission Controller, OPA Gatekeeper, and Kyverno).
Volume backup and restore for guest clusters
SUSE Virtualization v1.8 supports backup and restore operations for guest cluster workloads using the Harvester CSI Driver. This allows you to protect workload data by creating backups of PersistentVolumeClaims (PVCs) within the guest cluster, which are then stored using the underlying storage provider (currently limited to SUSE Storage) on the SUSE Virtualization cluster. You can restore these backups to recover from data loss or to migrate workloads across clusters, improving disaster recovery for guest applications.
Notification for pending virtual machine changes
The SUSE Virtualization v1.8 UI proactively alerts you when a virtual machine requires a restart to apply configuration changes, such as interface binding or resource allocation updates. If you choose to save changes without restarting immediately, a warning appears on the Virtual Machines screen to highlight virtual machines with pending changes. This prevents unapplied configurations from silently blocking future updates and ensures you can apply them at a convenient time using the UI restart action.
Configurable CPU models for live migration
SUSE Virtualization v1.8 allows you to set a baseline CPU model for a virtual machine to ensure reliable live migration across hosts with different CPU generations. You can explicitly select a CPU model (default, host-model, or a named model such as IvyBridge) during virtual machine creation using the UI or Terraform Provider. SUSE Virtualization then schedules and migrates the virtual machine only to nodes that support the required CPU model, ensuring backward compatibility and preventing migration failures caused by missing CPU features.
Interactive VPC topology
Harvester v1.8 adds a dynamic visual topology diagram to the Virtual Private Cloud details screen, providing a clear representation of logical switches and network relationships. The diagram displays the complete network hierarchy (covering VPCs, subnets, overlay networks, and virtual machines), while reflecting real-time power states by graying out stopped or paused instances. You can navigate complex network structures using pan and zoom controls, legend toggles for node filtering, click-to-highlight node relationships, and clickable VPC peering links that redirect to associated topology views.
SUSE Virtualization-specific RBAC roles in SUSE® Rancher Prime
v1.8 introduces SUSE Virtualization-specific role-based access control (RBAC) roles within Rancher, fully enforced at the backend API level. This allows administrators to assign granular permissions tailored to specific user responsibilities. Key additions include the following:
-
Read-only roles for viewing virtual machine definitions and monitoring data
-
Hardware management roles allowing non-administrators to manage PCI, USB, and vGPU devices
-
Scoped roles for managing virtual machines within designated projects and namespaces, without exposing cluster infrastructure resources or host devices
Role permissions are additive. To maintain cluster security, sensitive cluster-level configurations (such as logging facilities) remain strictly editable by cluster administrators, with other users restricted to read-only access.
Layer 3 underlay support for cluster networks
SUSE Virtualization v1.8 introduces Layer 3 connectivity support for software-defined cluster networks to serve as a dedicated underlay for Kube-OVN. Previously, inter-node virtual machine traffic traversed the management interface (mgmt-bo), causing bandwidth contention and preventing proper traffic segregation. With the latest update, you can assign a specific IP range to a custom cluster network, which SUSE Virtualization uses to automatically allocate node IPs and provision dedicated OVS bridges. This enables complete isolation of virtual machine data traffic from management traffic, improving overall network performance, security, and architectural flexibility.
SUSE Observability integration
SUSE Virtualization v1.8 officially supports integration with the SUSE Observability Stack Pack. SUSE Virtualization clusters can now seamlessly register with SUSE Observability to track core metrics, ensuring reliable data continuity and accurate resource reporting (such as CPU, memory, and node size) across cluster upgrades and dynamic scaling operations.
Native support for non-WWN disks
SUSE Virtualization v1.8 introduces an updated block device naming convention that removes the strict requirement for World Wide Names (WWNs). You can now attach and provision disks without WWNs across Longhorn V1, Longhorn V2, and LVM storage backends. This enhancement streamlines storage setup, particularly for NVMe drives and virtualized hardware where WWNs are often unavailable.
Features
-
#10327 [backport v1.8] [FEATURE] Allow particular ports access as default security policy
Enhancements
-
#10528 [backport v1.8] [ENHANCEMENT] Relax LB webhook with more backward compatibility
-
#10439 [backport v1.8] [ENHANCEMENT] Block parent vGPU device enable/disable actions
-
#10365 [backport v1.8] [ENHANCEMENT] Extra VM live migration during upgrade
-
#10353 [backport v1.8] [ENHANCEMENT] Support Storage Migration for VMs Restored from Snapshot or Backup
-
#10246 [backport v1.8] [ENHANCEMENT] Enhance the resource-quota processing when overhead-ratio is adjusted
-
#10734 [TASK] Bump Go version to 1.26 for v1.8.1
-
#10566 [TASK] Component updates for v1.8.1
Bug fixes
-
#11019 [BUG] rancher-monitoring can’t be enabled in v1.8.1-rc2
-
#10798 [Doc] Update the lvm doc with right path to addon yaml
-
#10789 [backport v1.8] [BUG]
ifname=kernel args don’t always work to rename network interfaces -
#10719 [BUG] Upgrade from v1.8.0 to v1.8-head stuck at waiting CAPI cluster fleet-local/local generation bump
-
#10707 [BUG] Can’t enable SR-IOV GPU on
-
#10613 [backport v1.8] [BUG] install.wipe_disks_list should not error out if the disk doesn’t exist
-
#10577 [backport v1.8] [BUG] f29abc8d airgapped master build fails to render dashboard
-
#10537 [backport v1.8] [BUG] Upgrade from v1.7.x to v1.8.0 stuck in Post-draining when storage-network is configured with RWX volumes
-
#10530 [backport v1.8] [BUG] Upgrade could fail without retrying when entering the node upgrade phase
-
#10515 [backport v1.8] [BUG] storage-validator : offline volume expansion test fails for Dell CSI drivers
-
#10467 [backport v1.8] [BUG] Stop using
rancher/kubectlimage -
#10371 [backport v1.8] [BUG] pcidevice passthorugh is broken on VM with hot plugged volume
-
#10338 [backport v1.8] [BUG] UI shows incorrect info when deleting storage
-
#10189 [BUG] node names not listed under node scheduling while creating a VM in UI
-
#10188 [BUG] Rancher v2.14.0-alpha9 has chance to fail to provision RKE2 v1.35 guest cluster
-
#9334 [BUG] Virtual Machine’s Node Scheduling Rules Are Incorrectly Truncated
-
#9142 [BUG] Can not reset node scheduling of a VM to
run on all available nodes
Known issues
This section includes only issues identified before the release date. For information about all issues associated with v1.8.1, see this page.
-
#10687 [BUG] v1.7.x → v1.8.0 OS-swap leaves two p11-kit files all-NUL in /usr/share on ~1/3 of nodes; breaks every TLS user on that host (containerd, Longhorn engine-image, kubelet)
-
#10447 [BUG] After upgraded to three Nodes with witness role to v1.8.0-rc6, vm failed to migrate with error "Kubevirt not ready"
-
#10221 [BUG] Failed to migrate VM after eject the windows image from CDROM device
-
#10220 [BUG] Fail to enable rancher-logging after negative upgrade cases