Releases — RATATOSK

KubeVirtv1.8.0Orchestration & ManagementMar 24, 2026

A broad operator-facing feature and maintenance release with API and behavior changes, dependency updates, deprecations, and removals. Monitoring and configuration changes include recording-rule and feature-gate updates, alongside scheduling and security-related behavior changes; no security advisories are reported.

Check if affected (7)

breakingNetwork attachment definition get permissions in the virt-controller ClusterRole, removed
Applicability is not stated in the release notes.
Network attachment definition get permissions are removed from the virt-controller ClusterRole when conditioned by a feature gate.
breakingStop requests for paused VMIs, rejected
Applies if you run paused VMIs.
Stop requests for paused VMIs are rejected.
breakingThe EnableVirtioFsConfigVolumes feature, graduated to GA
Applies if you use the EnableVirtioFsConfigVolumes feature gate.
The EnableVirtioFsConfigVolumes feature has graduated to GA and no longer requires its associated feature gate to be enabled.
+ 4 more on the release page

Plan ahead (4)

deprecatedThe DisableMDEVConfiguration feature gate, deprecatedremoval date not announced
Applies if you use the DisableMDEVConfiguration feature gate.
The DisableMDEVConfiguration feature gate is deprecated ahead of removal in a future release.
deprecatedThe kubevirt_vmi_migration_data_total_bytes metric, deprecated
Applies if you use the kubevirt_vmi_migration_data_total_bytes metric.
The kubevirt_vmi_migration_data_total_bytes metric is deprecated in favor of kubevirt_vmi_migration_data_bytes_total.
deprecatedThe MultiArchitecture feature gate, deprecated
Applies if you use the MultiArchitecture feature gate.
The MultiArchitecture feature gate is deprecated.
+ 1 more on the release page

Source ↗

KubeVirtv1.6.4Orchestration & ManagementMar 16, 2026

ACTION 1CHECK 2OTHER 16View full analysis

A maintenance release with a disclosed security fix, an indication rename for Windows VSS handling, and correctness, behavior, and observability updates. Most changes require no operator action beyond upgrading.

Action needed (1)

securityhighCVE-2025-47913 remediation
The release adds a replace directive that points golang/x/crypto to the patched openshift/golang-crypto module to remediate CVE-2025-47913.

Check if affected (2)

breakingQuiesceFailed indication renamed to QuiesceTimeout
Applies if you use Windows VSS.
The release replaces the QuiesceFailed indication with QuiesceTimeout and adds a 60-second Velero pre-backup hook timeout to better handle Windows VSS limitations.
breakingDefaultVirtWebhookClient{QPS,Burst} values aligned
Applicability is not stated in the release notes.
The release aligns the DefaultVirtWebhookClient{QPS,Burst} values with DefaultVirtWebhookClient{QPS,Burst} to help avoid saturating the webhook client during mass eviction events.

Source ↗