Skip to content

Latest commit

 

History

History
4977 lines (4584 loc) · 534 KB

CHANGELOG.md

File metadata and controls

4977 lines (4584 loc) · 534 KB

Changelog

v1.12.3 (2023-11-06)

  • b64d7e9b set release for 1.12.3
  • a9cbe027 kube-ovn-dpdk building need its dpdk base img (#3371)
  • b0efd5a9 delete check for existing ip cr (#3361)
  • 366e6411 fix IP residue after changing subnet of vm in some scenarios (#3370)
  • f593a046 sync acp chart (#3364)
  • def75169 kube-ovn-controller: fix memory growth caused by unused workqueue
  • 3023336d build(deps): bump github.com/osrg/gobgp/v3 from 3.19.0 to 3.20.0 (#3362)
  • c7ffd1f5 fix access svc ip failed, when acl is on (#3350)
  • 5da74964 Add Layer 2 forwarding for subnet ports again (#3300)
  • 31e77fbf add compact for release-1.12 (#3342)
  • d771eb8c prepare for next release

Contributors

  • Tobias
  • bobz965
  • changluyi
  • dependabot[bot]
  • hzma
  • 张祖建
  • 袁又袁

v1.12.2 (2023-10-24)

  • 23a6299c set release 1.12.2
  • b4abb34a Nat reuse router port external ip (#3313)
  • a0228ef9 dump cpu/mem profile into file on signal SIGUSR1/SIGUSR2 (#3262)
  • 5226abf6 kube-ovn-controller: fix ovn ic log directory not mounted to hostpath (#3322)
  • c7e6fc34 fix golang lint error (#3323)
  • f779892f update go version
  • f2eac645 fix build error
  • 9375e592 add type assertion for ip crd (#3311)
  • 127a87a9 add load balancer health check (#3216)
  • e01a8536 build(deps): bump google.golang.org/grpc from 1.58.3 to 1.59.0 (#3310)
  • c4e36417 build(deps): bump github.com/Microsoft/hcsshim from 0.11.1 to 0.11.2 (#3309)
  • 418d45f1 support vpc configuration of multiple external network segments through label and crd (#3264)
  • 51980378 sync subnet to vpc while switching between custom VPC and default VPC (#3218)
  • 529c9f4e security: ignore kubectl cve (#3305)
  • 29eef277 Don't enqueue VPC update when DeletionTimestamp is zero (#3302)
  • 408c6e9e Revert "update base image to ubuntu:23.10 (#3289)"
  • 671d55db add base rules for allowing vrrp packets (#3293)
  • c6b2cbdd build(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 (#3295)
  • c674f489 build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0 (#3296)
  • af35954f webhook: fix ip validation when pod is annotated with an ippool name (#3284)
  • 94ecdf7a webhook: use dedicated port for health probe (#3285)
  • 9cb875a1 add concurrency limiter to ovs-vsctl (#3288)
  • 47c4d725 update base image to ubuntu:23.10 (#3289)
  • b94667de support custom vpc dns its deployment replicas (#3286)
  • fa7eecf9 ovs: load kernel module ip_tables only when it exists (#3281)
  • de5860e0 update directory name in charts readme (#3276)
  • 481d372e fix ovn build failure (#3275)
  • 92654f4e build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 (#3271)
  • 1036b0a8 build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 (#3271)
  • 3cb084ed build(deps): bump github.com/prometheus/client_golang (#3266)
  • 8aaca988 build(deps): bump github.com/prometheus/client_golang (#3266)
  • e7a91d0a prepare for the next release
  • 9b03b4ad pinger: increase packet send interval (#3259)
  • 70a13529 add init container in vpc-nat-gateway statefulset for init (#3254)
  • 1156c03d lrp should use chassis name instead of uuid (#3258)

Contributors

  • Tobias
  • bobz965
  • dependabot[bot]
  • hzma
  • wenwenxiong
  • zcq98
  • 夜微澜
  • 张祖建
  • 袁又袁
  • 马洪贞

v1.12.1 (2023-09-25)

  • e945a106 set release for v1.12.1
  • f9adc20a fix: for existing nic, no need to set the port type to internal (#3243)
  • e19b5b50 adjust vip prints as ip (#3248)
  • 7d3dc037 add dpdk probe (#3151)
  • 223cc614 build(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 (#3251)
  • 66a2f59b build(deps): bump github.com/Microsoft/hcsshim from 0.11.0 to 0.11.1 (#3245)
  • e5f8671b update kubectl to v1.28.2
  • 8e27e204 fix goproxy Denial of Service vulnerability (#3240)
  • 444b3172 build(deps): bump github.com/cyphar/filepath-securejoin (#3239)
  • 55edc1b6 build(deps): bump github.com/onsi/ginkgo/v2 from 2.11.0 to 2.12.1 (#3237)
  • 525e3b2d build(deps): bump github.com/docker/docker (#3234)
  • de3a300d build(deps): bump github.com/evanphx/json-patch/v5 from 5.6.0 to 5.7.0 (#3235)
  • 019217c4 build(deps): bump github.com/osrg/gobgp/v3 from 3.17.0 to 3.18.0 (#3238)
  • 62aabb6e build(deps): bump google.golang.org/grpc from 1.57.0 to 1.58.1
  • 72b82d06 build(deps): bump github.com/Microsoft/hcsshim from 0.10.0 to 0.11.0 (#3228)
  • 20b8ca58 build(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 (#3232)
  • 8817e24d chart: remove subnet finalizers before subnets are deleted (#3213)
  • 47e80fea kubectl-ko: add new command ovn-trace for tracing ovn lflows only (#3202)
  • 0bb52d91 fix conflict after cherry-pick
  • 87779e18 add golang lint (#3154)
  • 545d64d8 add special handling for the route policy of the default VPC (#3194)
  • 3603584c fix add static route to wrong table of ovn (#3195)
  • 012e0030 netpol: fix duplicate default drop acl (#3197)
  • 1c13e40a add log to help find conflict ip owner (#3191)
  • 7f3b1e8b suuport user custom log location (#3186)
  • 188c252d enable set --ovn-northd-n-threads (#3150)
  • c5d4221f Fix max unavailable (#3149)
  • 5d072110 add probe (#3133)
  • 0aa39e82 underlay: fix ip/route tranfer when the nic is managed by NetworkManager (#3184)
  • 47f475b0 ci: wait for terminating ovs-ovn pod to disappear (#3160)
  • 01123f8d fix ovn build (#3166)
  • f3b64605 chart: fix ovs-ovn upgrade (#3164)
  • ff163558 subnet: fix deleting lr policy on node deletion (#3176)
  • 7339b5a5 ci/test: bump various versions (#3162)
  • 094d1369 kubectl-ko: get ovn db leaders only on necessary (#3158)
  • 1dad23d9 underlay: fix NetworkManager operation (#3147)
  • 0e4909a2 Revert "enable set --ovn-northd-n-threads"
  • 9fd7ef5e enable set --ovn-northd-n-threads
  • 2e820fd8 sbctl chassis operation replace with libovsdb (#3119)
  • 00bfa4bd base: remove ovn patch for skipping ct (#3141)
  • 377d56dc Enable set probe (#3145)
  • a7af8973 support recreate a backup pod with full annotation (#3144)
  • 515bdb79 fix ovn nat not clean (#3139)
  • f225c66d ovn: do not send direct traffic between lports to conntrack (#3131)
  • e5c62d96 delete append externalIds process in initIPAM (#3134)
  • bd4d99be add e2e test for ovn db recover (#3118)
  • 74f69b27 bump version number
  • e1a1b78b docs: updated CHANGELOG.md (#3122)

Contributors

  • bobz965
  • changluyi
  • dependabot[bot]
  • github-actions[bot]
  • hzma
  • 夜微澜
  • 张祖建
  • 马洪贞

v1.12.0 (2023-08-08)

  • 15861418 update changelog
  • 6cf53101 build(deps): bump sigs.k8s.io/controller-runtime from 0.15.0 to 0.15.1 (#3120)
  • cd1202ca ovn: fix corrupted database file on start (#3112)
  • 02f8c630 some fixes in e2e (#3116)
  • d8fa8395 controller: fix vpc update (#3117)
  • b5b25ffd increase event burst size (#3115)
  • c8031f6e build(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 (#3114)
  • 6ba997d2 简化 ovn eip 类型 (#3107)
  • a0c5e389 fix u2o policy route allocate too many openflows cause oom (#3099)
  • a9fdbf92 Fix relevant annotations are not deleted in hotnoplug nic process (#3108)
  • 3c6d6bc0 ovn: delete the db file if the node with new empty db file cannot join cluster for more than 120s (#3101)
  • 914bf613 get all chassis once (#3103)
  • 42e0574c distinguish nat ip for central subnet with ecmp and active-standby (#3100)
  • a27ce4c3 build(deps): bump github.com/osrg/gobgp/v3 from 3.16.0 to 3.17.0 (#3105)
  • 68dc1c38 add log near err (#3098)
  • c6c472a0 iptables: reject access to invalid service port when kube-proxy works in IPVS mode (#3059)
  • f8835ef5 Ovn nat 1 (#3095)
  • 5704dae0 skip ok pod (#3090)
  • 18580edf ipam: return error for invalid ip range (#3088)
  • a7e7a83d some fixes in e2e (#3094)
  • 88218743 bug_fix if only one port bind to the sg, then unbind the port to the sg ,it will not enforce in port_group (#3092)
  • 4c1161e9 fix .status.default when initializing the default vpc (#3086)
  • fa91428b fix repeate set chassis (#3083)
  • 68a798f4 build(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0 (#3085)
  • da1648cc fix go fmt
  • 88b5912f fix kube-ovn-speaker log (#3081)
  • 89544c35 remove FOSSA status card
  • ac648680 cni-server: fix ovn mappings for vpc nat gateway (#3075)
  • 0fe9dcb2 fix kube-ovn-speaker (#3076)
  • 827a5a27 build(deps): bump github.com/Microsoft/hcsshim from 0.9.10 to 0.10.0 (#3079)
  • 38cd9203 ovn client: fix sb chassis existence check (#3072)
  • 038ff7de e2e: fix switch lb rule test (#3071)
  • e14ebbd5 bump github.com/docker/docker to v24.0.5 (#3073)
  • 90c83057 iptables: add --random-fully to SNAT rules (#3066)
  • 1350397e update lint tmeout
  • ff6d03d0 build(deps): bump github.com/onsi/gomega from 1.27.9 to 1.27.10 (#3069)
  • 76b01496 bump k8s to v1.27.4 (#3063)
  • d8e59ab6 e2e: do not import pkg/daemon (#3055)
  • 20a6526c build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.9 (#3065)
  • af335ba8 build(deps): bump github.com/Microsoft/hcsshim from 0.9.9 to 0.9.10 (#3061)
  • 976a32b0 ci: fix multus installation (#3062)
  • 0d1599ff add srl connectivity test (#3056)
  • 42f35a35 ipam: fix ippool with single dual-stack address (#3054)
  • 2ba3b8e5 controller: skip VIP gc if LB not found (#3048)
  • 52232b5e keep vm vip when enableKeepVmIP is true (#3053)
  • ed58b210 cni: reduce memory usage (#3047)
  • 3be1e84c set genev_sys_6081 tx checksum off (#3045)
  • 4e761156 fix vpc lb init (#3046)
  • f4f80415 custom vpc pod support tcp http probe with tproxy method (#3024)
  • 494209d3 change log (#3042)
  • b40c35b8 Makefile: add deepflow and kwok installation (#3036)
  • 5a0686b2 windows: fix ovn patches (#3035)
  • e3b7439d ci: pin go version to 1.20.5 (#3034)
  • 97a3e1bc static ip in exclude-ips can be allocated normally when subnet's availableIPs is 0 (#3031)
  • 9d88e497 pinger: use fully qualified domain name (#3032)
  • f3833f91 feat: suport kubevirt nic hotplug (#3013)
  • 62f33289 fix lrp eip not clean (#3026)
  • 047af4a2 build(deps): bump helm/kind-action from 1.7.0 to 1.8.0 (#3029)
  • e01e616e update maintainer
  • ea9c1f1e uninstall.sh: fix ipset name (#3028)
  • 9e6dc636 build(deps): bump github.com/docker/docker (#3027)
  • 3dd7f4ab replace ovn legacy client with libovsdb (#3018)
  • c5bfdb46 install.sh: fix duplicate resources apply (#3023)
  • 2e4fb05c build(deps): bump github.com/docker/docker (#3019)
  • aefaef5a build(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.2 (#3020)
  • 1f1fb82e ovn: fix cluster connections when SSL is enabled (#3001)
  • 18560c96 cleanup.sh: wait for provier-networks to be deleted before deleting kube-ovn-cni (#3006)
  • 9304ae5a kube-ovn-controller: fix workqueue metrics (#3011)
  • d4153885 ci: fix go cache key (#3015)
  • 5a5f66eb fix vlan subnet use logical gw can not access outside cluster node (#3007)
  • 18fd55dd build(deps): bump github.com/prometheus-community/pro-bing (#3016)
  • 269f460d fix vpc already delete while delete policy route (#3005)
  • e744d76e make compatible with simplicified enable-eip-snat-cm (#3009)
  • 2a652530 build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 (#3012)
  • d5f89bce subnet: fix nat outgoing policy rule (#3003)
  • 8358a91e build(deps): bump github.com/osrg/gobgp/v3 from 3.15.0 to 3.16.0 (#3010)
  • fe924e9f fix subnet finalizer (#3004)
  • 12366937 chart: fix readOnly in volumes (#3002)
  • d5462b10 libovsdb: various bug fixes (#2998)
  • af04530e choose subnet by pod's annotation in networkpolicy (#2987)
  • 5c455499 IPPool: fix missing support for CIDR (#2982)
  • f2d063a8 kubectl ko performance enhance (#2975)
  • d5d196e7 fix deleting old sb chassis for a re-added node (#2989)
  • 30cd09e6 add e2e for new ippool feature (#2981)
  • 5fdf1f9e underlay: fix NetworkManager syncer for virtual interfaces (#2988)
  • 1bb51239 underlay: does not set a device managed to no if it has VLAN managed by NM (#2986)
  • 3793e993 build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 (#2985)
  • 6a5bfe46 support helm install hybrid_dpdk ovs-ovn (#2980)
  • dc40a8cb add unittest for IPAM (#2977)
  • daa436d3 IPAM: fix subnet mutex not released when static IP is out of range (#2979)
  • 65fd8a4a fix initialization check of vpc nat gateway configuration (#2978)
  • e558702d refactor: make qos test cases parallel (#2957)
  • 27685a17 IPAM: add support for ippool (#2958)
  • 41b4f266 build(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 (#2974)
  • 57b01b4a ovn ic support dual (#2970)
  • 7a14cf21 base: fix ovn patches (#2971)
  • a5194e66 build(deps): bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 (#2968)
  • a5e63c72 add detail comment (#2969)
  • 13256fab 1. add host multicast perf (#2965)
  • 33b6df12 cni-server: reconcile ovn0 routes periodically (#2963)
  • e4f68267 uninstall.sh: flush and delete iptables chain OVN-MASQUERADE (#2961)
  • 9fbebd34 fix e2e failed (#2960)
  • 5de25172 u2o specify u2oip from v1.9 (#2934)
  • 30ea6d6c underlay: sync NetworkManager IP config to OVS bridge (#2949)
  • 27a2f300 chore: USERS.md (#2955)
  • 1c29580e bump k8s version to v1.27.3 (#2953)
  • c0730acb ci: fix build-base strategy (#2950)
  • f52b1509 e2e: add qos policy test cases (#2924)
  • d8739d29 typo (#2952)
  • de9c9603 build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 (#2951)
  • f4b3c0fe build(deps): bump github.com/prometheus/client_golang (#2948)
  • e13c2005 Revert "nm not managed only in the change provide nic name case (#2754)" (#2944)
  • 765dc8d7 add permision for test-server.sh (#2942)
  • a9d0b4be Kubectl ko diagnose perf (#2915)
  • 8f414f72 build(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0 (#2940)
  • 88f706e4 controller: fix DHCP MTU when the default network mode is underlay (#2941)
  • ea56b560 e2e: fix u2o case (#2931)
  • c1c716f1 add err log to help find conflict ip owner (#2939)
  • 1f27076f support set the mtu of dhcpv4_options (#2930)
  • f1d2011a modify lb-svc dnat port error (#2927)
  • d7edac78 fix race condition in gateway check logs (#2928)
  • fc7c16ae add subnet.spec.u2oInterconnectionIP (#2921)
  • 6105d57b disable ai review
  • 8773ea3d e2e: fix waiting deployment to be restarted (#2909)
  • 56927913 make conformance with underlay pn vlan subnet has no gw (#2908)
  • 0356a63f fix: natgw init check command not work (#2923)
  • 3a8e13ee fix issue 2916 (#2917)
  • 517d3791 add sync map to fix cocurrent write (#2918)
  • dff950b1 cni-server: clear iptables mark before doing masquerade (#2919)
  • d043a2d2 build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0 (#2913)
  • 525b0b76 build(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8 (#2914)
  • 3616d3de For eip created without spec.V4ip this field (#2912)
  • ace0b970 match outgoing interface when perform snat (#2911)
  • d61a2ad6 libovsdb: ignore not found error when listing objects with a filter (#2900)
  • 78f923a9 build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 (#2903)
  • 0e27e0ca build(deps): bump github.com/osrg/gobgp/v3 from 3.14.0 to 3.15.0 (#2904)
  • fd92c2a8 fix base build
  • 668287af fix build base ci
  • a1746140 fix build base ci
  • 2f52d929 refactor IPAM (#2896)
  • db51370f add e2e u2o vpc version check (#2901)
  • 6acecb60 kube-ovn-controller: fix subnet update (#2882)
  • 35aa8b40 Supporting user-defined kubelet directory (#2893)
  • 3883a744 ci: use latest golangci-lint
  • efe3ee34 underlay: do not delete patch ports created by ovn-controller (#2851)
  • 04c64f0a update pr-review
  • aa1ffaa3 auto build base for release branches
  • fe4eec77 Add natoutgoing policy rules (#2883)
  • bbe04e89 pin golangci-lint version
  • 0c5f9055 skip case 'connect to NodePort service with external traffic policy set to Local from other nodes' (#2895)
  • 93f027f3 refactor subnet gateway (#2872)
  • 33c52623 update webhook check (#2878)
  • a123be78 skip pr-review as run out openai quota
  • 5c2c9487 skip kubectl cve
  • 403c2dcd build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7 (#2890)
  • 589d0b6f e2e: multiple external network (#2884)
  • 79521c31 build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#2885)
  • 71253fe5 fix vip str format (#2879)
  • 6b5345ff ci: fix valgrind result analysis (#2853)
  • 7c80a135 ovs: fix memory leak in qos (#2871)
  • 9f39621a feat: vpc nat gw e2e (#2866)
  • e68b983b build(deps): bump github.com/docker/docker (#2875)
  • 056b4cf8 fix gc nil pointer (#2858)
  • 32b85219 bump k8s to v1.27.2 (#2861)
  • a80b3754 add e2e test for slr (#2841)
  • 20b20366 Move docs to new website (#2862)
  • 24d9dfee build(deps): bump gopkg.in/k8snetworkplumbingwg/multus-cni.v4 (#2860)
  • 83a47a73 update dependabot
  • d6202bc7 refactor clusterrole for kube-ovn (#2833)
  • b1c77ad7 some fixes in CI/e2e (#2856)
  • a94fb0b2 manage ovn bfd with libovsdb (#2812)
  • d9a038ce update the volumeMounts premission (#2852)
  • d642f5b5 fix vip lsp not clean (#2848)
  • a1cf2b39 U2o support custom vpc (#2831)
  • 2068d879 kubectl-ko: fix trace when u2oInterconnection is enabled (#2836)
  • 6ee56d08 ci: detect ovs/ovn memory leak (#2839)
  • 77656773 iptables: always do SNAT for access from other nodes to nodeport with external traffic policy set to Local (#2844)
  • 175fb262 fix underlay access to node through ovn0 (#2842)
  • 98392b3a build(deps): bump github.com/docker/docker (#2843)
  • da944a3e adapt vpc dns in master (#2822)
  • c7b7a0a5 bump go dependencies (#2820)
  • 94d7cc86 fix MTU when subnet is using logical gateway (#2834)
  • 486c61ae refactor image builds (#2818)
  • a7fd9ddf build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#2832)
  • 667f5a7c build(deps): bump github.com/onsi/gomega from 1.27.6 to 1.27.7 (#2830)
  • 853abd9d vip support create arp proxy logical switch port (#2817)
  • 46bdd01a build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 (#2828)
  • e988089e build(deps): bump github.com/docker/docker (#2827)
  • 3b8c9edc add route for service ip range when init vpc-nat-gw (#2821)
  • 4f015f6d do not allocate MAC address when kube-ovn is called as an IPAM plugin (#2816)
  • a30daea4 Iptables nat support share eip (#2805)
  • 0466edce fix typos (#2815)
  • fca6c9d5 fix some typos (#2814)
  • 630104d5 add iperf to test group multicast (#2796)
  • 2ba3846b add available check for northd enpoint (#2799)
  • 253358ea manage ovn lr static route with libovsdb (#2804)
  • 781b47d9 add support of user-defined endpoints to SwitchLBRule (#2777)
  • 74221a6e e2e: fix test container not removed (#2800)
  • 6ddd03bf manage ovn lr policy with libovsdb (#2788)
  • 7350db5f build(deps): bump github.com/docker/distribution (#2797)
  • 8f43028a fix handedeletePod repeat 4 times (#2789)
  • c8af3dd3 fix cleanup order (#2792)
  • b9542ad3 fix missing main route table for the default vpc (#2785)
  • 1511573d add ovn DVR fip e2e (#2780)
  • 0127e10a build(deps): bump github.com/containernetworking/plugins (#2784)
  • 100227be add key lock for more resources (#2781)
  • 16db5082 bump cni plugins to v1.3.0 (#2786)
  • 08e2e66f replace util.DefaultVpc with c.config.ClusterRouter (#2782)
  • e1154acf fix static route recreation after kube-ovn-controller restarts (#2778)
  • e7190e6a clean up code about static routes (#2779)
  • b1a339b7 Reorder cleanup step by put subnet and vpc to the last to avoid conflict (#2776)
  • a2b789cc optimize kube-ovn-controller logic (#2771)
  • 3b2b0716 use rate limiting queue with delaying for pod deletion events (#2774)
  • 04e4d258 fix underlay subnet kubectl ko trace error (#2773)
  • 9b1de481 feat: natgw qos (#2753)
  • 11b171e1 build(deps): bump github.com/docker/docker (#2770)
  • 62d8122c fix ip statistics in subnet status (#2769)
  • d3d01762 informer: wait for cache sync before adding event handlers (#2768)
  • a23dd865 build(deps): bump github.com/scylladb/go-set (#2766)
  • e2bf60f7 support disable arp check ip conflict in vlan provider network (#2760)
  • c55cbd6e replace string map with string set (#2765)
  • 99be9cb0 cni-server: wait ovs-vswitchd to be running (#2759)
  • 1933ed87 kubectl-ko: support trace for pod with host network (#2761)
  • bf1a3d7c libovsdb: fix potential duplicate addresses (#2763)
  • 5585d447 ci: run kube-ovn e2e for underlay (#2762)
  • cf1748c6 kubectl-ko: fix pod tracing in underlay (#2757)
  • 6db99d53 When Subnet spec.vpc is updated, the status in VPC should also be updated. (#2756)
  • 328a8911 ovn-nbctl: remove unused functions (#2755)
  • 86a07a30 add route table option in static route for subnet (#2748)
  • f6414ce1 replace acl/address_set function call with ovnClient (#2648)
  • c77f3681 nm not managed only in the change provide nic name case (#2754)
  • cc1be3ee support node local dns cache (#2733)
  • d7fa2a49 build(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 (#2752)
  • faff1e62 build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0 (#2751)
  • bdd201b1 update eip qos procees, replace qosLabelEIP with natLabelEip (#2736)
  • d1711acd refresh nat gw image before using it (#2743)
  • 353df49a build(deps): bump github.com/prometheus/client_golang (#2745)
  • 91400ecc Using full repo name to avoid short-name error in podman (#2746)
  • fa404a06 build(deps): bump github.com/osrg/gobgp/v3 from 3.13.0 to 3.14.0 (#2738)
  • 7eed8341 add policy route when use old active gateway node for centralized subnet (#2722)
  • 66615b6d feat: support for multiple external network (#2725)
  • f8328bdb build(deps): bump github.com/docker/docker (#2732)
  • 6198f691 build(deps): bump github.com/Microsoft/hcsshim from 0.9.8 to 0.9.9 (#2731)
  • 2a015e5c base: remove patch for fixing ofpbuf memory leak (#2715)
  • a01f9606 fix recover db failed using method in (#2711)
  • a6d2a53c refactor: improve performance by using cache (#2713)
  • 7dbfd2be For dualstack and ipv6 the default ipv6 range should be same with the ipv4 cidr. (#2708)
  • 15780bfb feat: support dynamically changing qos for EIP (#2671)
  • d865b48d base: refactor dockerfile (#2696)
  • 53bfcf44 kubectl-ko: add support for tracing nodes (#2697)
  • f5fee4c9 cni-server: do not perform ipv4 conflict detection during VM live migration (#2693)
  • 942b87d1 fix: iptables nat gw e2e not clean sts eth0 net1 ip (#2698)
  • 236574c7 Add random fully when nat (#2681)
  • 9e3f70c1 replace StrategicMergePatchType with MergePatchType (#2694)
  • b59bfd33 ci: fix scheduled vpc nat gateway e2e (#2692)
  • d469235f ovn-controller: do not send GARP on localnet for Kube-OVN ports (#2690)
  • 7db85edd netpol: fix enqueueing network policy after LSP creation (#2687)
  • aba72443 add tcp mem collector (#2683)
  • 07a6d4ca fix manifest yamls (#2689)
  • 1d6a0fe4 attach node name label in ip cr (#2680)
  • 233dc61e adapt ippool annotation (#2678)
  • 095dca26 netpol: fix packet drop casued by incorrect address set deletion (#2677)
  • 3dc36c8c fix kubectl ko using ovn-central pod that not in a good status (#2676)
  • 9c5523f7 add nat gw e2e (#2639)
  • a9993dac add workflows for release chart (#2672)
  • 4399963e build(deps): bump github.com/Microsoft/go-winio from 0.6.0 to 0.6.1 (#2663)
  • d6b0c28d remove auto update k8s and cadvisor
  • b57f36ff build(deps): bump k8s.io/sample-controller from 0.26.3 to 0.26.4 (#2675)
  • a33adde2 ignore k8s major and minor dependencies as they always break build.
  • 68f813e0 rename charts (#2667)
  • 933d76e3 ipam update condition refactor (#2651)
  • 05e72516 fix LSP existence check (#2657)
  • f84343e8 fix network policy issues (#2652)
  • 148f1bf4 Resolve SetLoadBalancerAffinityTimeout not being effective (#2647)
  • 0b5fc5d3 broadcast free arp when pod is setup (#2638)
  • dc31cbd2 delete sync user (#2629)
  • 7e872fbe fix: eip qos (#2632)
  • ddf28fc2 fix: make webhook port configurable. (#2631)
  • c53d58da support ovn ipsec (#2616)
  • 53bf75d2 feat: add support for EIP QoS (#2550)
  • 1fc5d853 libovsdb: fix race condition in OVN LB operations (#2625)
  • cfff2db3 fix IPAM allocation caused by incorrect pod annotations patch (#2624)
  • 3e67e893 ci: deploy multus in thick mode (#2628)
  • 1caaea2a libovsdb: use monitor_cond as the monitor method (#2627)
  • c0ab8351 ci: fix multus installation (#2622)
  • 84a910b0 ovs: fix dpif-netlink ofpbuf memory leak (#2620)
  • 42a86869 Optimized tolerations code in vpc-nat-gw (#2613)
  • 1e8e3828 replace port_group function call with ovnClient (#2608)
  • 9b577403 reduce test binary size and add missing webhook build (#2610)
  • 949eb8b7 fix: ovneip print column and finalizer (#2593)
  • 5babe8e6 add affinity to vpc-nat-gw (#2609)
  • 6bf15d4a ci: fix multus installation (#2604)
  • 8629d634 update .gitignore (#2600)
  • 254598fb bump go modules (#2603)
  • 602b1605 build(deps): bump peter-evans/create-pull-request from 4 to 5 (#2606)
  • 787616f1 build(deps): bump github.com/docker/docker (#2605)
  • 62b8761d build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 (#2607)
  • d2523f46 cut invalid OVN_NB_DAEMON to make log more readable (#2601)
  • 4c7ddc68 unittest: fix length assertion (#2597)
  • 7ba428d7 use copilot to generate pr content
  • 1a474fd9 replace lb function call with ovnClient (#2598)
  • a73deb47 build(deps): bump github.com/osrg/gobgp/v3 from 3.12.0 to 3.13.0 (#2596)
  • 2fb1f95a Merge handleAddPod with handleUpdatePod. (#2563)
  • 9399c1e1 fix log (#2586)
  • da323a52 fix: ovn snat and fip delete (#2584)
  • 048e9315 underlay: get address/route before setting nm managed to no (#2592)
  • 5d036cd5 update chart description (#2582)
  • 6d50bdc3 iptables: use the same mode with kube-proxy (#2535)
  • 09477984 ci: bump kind image to v1.26.3 (#2581)
  • 5b7bdccb fix: invalid memory address (#2585)
  • cba9c16e kubectl ko change solution to collect logs to path kubectl-ko-log (#2575)
  • bb268618 if one item is removed, do not requeue (#2578)
  • 5aad7c53 build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6 (#2579)
  • a9d66220 fix vpc dns when ovn-default is dualstack (#2576)
  • 279717ca move the vpc-nat generic configurations into one single ConfigMap (#2574)
  • 887df215 feat: add ovn dnat (#2565)
  • 02a86873 Fix kubectl ko log loss when restart deployment or ds (#2531)
  • 1d1f5fab add wait until (#2569)
  • c0e843fd do no review dependency update
  • a7ccd1ae build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 (#2572)
  • 5dce9cd2 move ipam.subnet.mutex to caller (#2571)
  • 9fba0b54 build(deps): bump sigs.k8s.io/controller-runtime from 0.14.5 to 0.14.6 (#2568)
  • 3f7997b3 fix: memory leak in IPAM caused by leftover map keys (#2566)
  • 1e9f3529 build(deps): bump github.com/docker/docker (#2567)
  • 8e03e97b fix ovn-bridge-mappings deletion (#2564)
  • e19620b0 fix lrp deletion after upgrade (#2548)
  • ed928348 fix gw label for vpc update field (#2562)
  • 642fa92a update CRD in helm chart (#2560)
  • 1a41369d fix CRD indent in install.sh (#2559)
  • f955143f fix update snat rules not effect correctly (#2554)
  • fd6ec3d8 fix go mod list (#2556)
  • b4e7e2e8 do not set device unmanaged if NetworkManager is not running (#2549)
  • fe1b4ac6 update review bot
  • f9eb0ca4 build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5 (#2551)
  • 955cf0ff underlay: fix network manager operation (#2546)
  • b8fc9d9a controller: fix apiserver connection timeout on startup (#2545)
  • 2ae8a9af fix update fip rules not effect correctly (#2540)
  • 98dc2f25 fix lsp deletion failure when external-ids:ls is empty (#2544)
  • 6b9cdd33 sync parameters to charts from install script (#2526)
  • 8c49fc01 underlay: delete altname after renaming the link (#2539)
  • 2a81f404 failed to delete ovn-fip or ovn-snat (#2534)
  • 17807e55 fix encap_ip will be lost when we restart the ovs-dpdk node (#2543)
  • 829e74c2 fix service fail (#2537)
  • bd91f8b8 Add speaker param check (#2538)
  • 7e6feabe feat: support nic-hotplug to a running pod. (#2521)
  • bbe1f3e8 build(deps): bump google.golang.org/grpc from 1.53.0 to 1.54.0 (#2541)
  • ae51a656 fix update dnat rules not effect correctly (#2518)
  • 569b576a underlay: fix link name exchange (#2516)
  • e9710959 add vip to webhook e2e (#2525)
  • 30d30bfe fix submariner e2e (#2519)
  • 9eda4859 fix lsp gc after upgrade (#2513)
  • 0b8964c9 fix: ovn-fip creation failure due to an excessively long label (#2529)
  • cc8a11d7 add sleep (#2523)
  • 416cc772 when restart deployment kube-ovn-controller the kubectl ko log loss (#2508)
  • e7085dec optimize e2e framework (#2492)
  • 4b59bdfc fix ovs patches (#2506)
  • 1138c2cf fix subnet iprange not correct (#2505)
  • 0ebb6785 bump k8s to v1.26.3 (#2514)
  • 6fb79923 add kubevirt multus nic lsp before gc process (#2504)
  • 3fc6d8e3 update slack link
  • 46d9edbd docs: updated CHANGELOG.md (#2515)
  • 36329d54 optimize ovs upgrade script (#2512)
  • f8aabdf5 ci: change to pull_request_target
  • 089d8cd2 ci: add openai to review the code (#2511)
  • ee5e59a9 add support of user-defined image name for vpc-dns (#2502)
  • 20e70222 build(deps): bump google.golang.org/protobuf from 1.29.1 to 1.30.0 (#2500)
  • b6913c52 build(deps): bump github.com/Microsoft/hcsshim from 0.9.7 to 0.9.8 (#2499)
  • 443dd58b replace lr/ls/lrp/lsp function call with ovnClient (#2477)
  • 599ed234 ci: fix go cache (#2498)
  • 0606f90d add skip (#2491)
  • 1aff1c4f ensure address label is correct before deleting it (#2487)
  • e9dd2892 fix scheduled submariner e2e (#2469)
  • c66a93ac build(deps): bump actions/setup-go from 3 to 4 (#2490)
  • a8aede74 build(deps): bump github.com/onsi/gomega from 1.27.3 to 1.27.4 (#2489)
  • 70a220a0 add some sleep wait iptables clean (#2488)
  • 0b8e5346 Add kubectl ko log (#2451)
  • c3620cd0 fix: gw configmap may not exist (#2484)
  • a31235b1 fix ovs qos e2e for versions prior to v1.12 (#2483)
  • 1470c10d add node to addNodeQueue if required annations are missing (#2481)
  • 47a70557 Add jitter support to netem qos parameters (#2476)
  • b15fc51b build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.29.1 (#2480)
  • d1cd3ddd fix ovs-ovn startup/restart (#2467)
  • b26784f1 fix changging the stopped vm's subnets, the vm cann't start normally (#2463)
  • 7e2e437d build(deps): bump github.com/onsi/gomega from 1.27.2 to 1.27.3 (#2475)
  • 5b07ccbb when we delete the pod,it's no need to update the sgs assign to pod (#2465)
  • 3fd564b7 fix libovsdb issues (#2462)
  • 0689a729 fix ips CR not found due to etcd error (#2472)
  • e368a20e wait for subnet lb (#2471)
  • 0ecd9aff chore: update base periodically to resolve security issues. (#2470)
  • 5387acf4 do not delete external switch if it is created by provider network vlan subnet (#2449)
  • 282706d6 add upgrade compatibility (#2468)
  • 482167a9 ci: fix ovn-ic installation (#2456)
  • 2bce5080 Fixed:Prevents grep from prematurely exiting the shell script if it cannot find a pattern (#2466)
  • 4d850e01 add install for webhook (#2460)
  • f17b4348 e2e add some debug info and sleep (#2439)
  • 8df83cb1 do not set subnet's vlan empty on failure (#2445)
  • 7ae8db6c wait subnet lb clear in set subnet EnableLb to false e2e (#2450)
  • 674cc290 build(deps): bump github.com/emicklei/go-restful/v3 (#2458)
  • e4c089ab ci(Mergify): configuration update (#2457)
  • 0444a2b2 kube-ovn-speaker support IPv6/Dual (#2455)
  • 790c7cc2 replace nb_global function call with ovnClient (#2454)
  • 0d129742 build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0 (#2452)
  • b399cca6 fix parsing logical router static routes (#2443)
  • 9df323d7 base: fix ovn patches (#2444)
  • 3259b912 prepare for libovsdb replacement (#1978)
  • d71a314d support auto change external bridge (#2437)
  • f4bef89e fix ovn-speaker router bug (#2433)
  • 497260ef ovs: change update strategy to RollingUpdate (#2422)
  • c84479be add kubevirt install (#2430)
  • e9017e2a e2e: wait for subnet to meet specified condition (#2431)
  • 810f7b99 delete all invalid ovn lb strategy and prevent invalid multiple endpoint reconsile (#2419)
  • 25fef7cc add sumbarier case (#2416)
  • a99ceb20 iptables-rules upgrade compatible (#2429)
  • 57033847 add log (#2423)
  • 824f2e0a check subnet gateway after wait (#2428)
  • 86c01e6b fix chart install/upgrade e2e (#2426)
  • 322eab3b ci: fix cilium chaining e2e (#2391)
  • 79367647 build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0 (#2427)
  • dc5148bb resolve e2e error in v1.12.0 (#2425)
  • 541b641f update test server and test results (#2421)
  • 98050705 Modify the pod scheduling of vpcdns (#2420)
  • 83ab70ff e2e: double parallel test nodes in ci (#2411)
  • fd3bee6e fix scheduled e2e (#2417)
  • 5cd8649b build(deps): bump sigs.k8s.io/controller-runtime from 0.14.4 to 0.14.5 (#2415)
  • 68d2ebfa build(deps): bump github.com/osrg/gobgp/v3 from 3.11.0 to 3.12.0 (#2414)
  • 8f6c21ce build(deps): bump k8s.io/klog/v2 from 2.90.0 to 2.90.1 (#2413)
  • d837d978 bump go modules (#2408)
  • 8fbc5dd1 e2e: fix random conflict in parallel processes (#2410)
  • cedcbbc8 fix_base_sg_rule (#2401)
  • 4a28cfb3 build(deps): bump k8s.io/sample-controller from 0.26.1 to 0.26.2 (#2403)
  • d30935e0 build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2 (#2396)
  • 645908f6 Support bfd management (#2382)
  • b1a09baf remove unused param (#2393)
  • d2445519 update ipv6 security-group remote group name (#2389)
  • db435dcc Fix routeregexp ipv6 (#2395)
  • 8a63d280 ci: fix ref name check (#2390)
  • 42e6a302 add support of user-defined kubelet directory (#2388)
  • 282644e9 support 1.11 (#2387)
  • 2d1c1252 ci: skip netpol e2e automatically for push events (#2379)
  • 109704d0 ci: make path filter more accurate (#2381)
  • 77022437 build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#2386)
  • 9737c390 Fix comment format (#2383)
  • 01e55805 fix: ovs-ovn should reboot now (#2297)
  • 5e0c305f fix service dual stack add/del cluster ips not change ovn nb (#2367)
  • ff836116 ci: fix path filter for windows build (#2378)
  • 4f3f4e74 e2e: run specs in parallel (#2375)
  • ffbb1524 add base sg rules for ports (#2365)
  • db9f9272 accelerate cleanup (#2376)
  • 50df652c update ovnnb model (#2371)
  • f68044bc docs: updated CHANGELOG.md (#2373)
  • 8a1814a8 fix changelog workflow (#2372)
  • a1a528b7 build(deps): bump github.com/Microsoft/hcsshim from 0.9.6 to 0.9.7 (#2370)
  • ee53dfe1 Add gateway monitor metrics and event (#2345)
  • c061ae18 ci: fix default branch test (#2369)
  • 4a0829a7 fix github actions workflows (#2363)
  • 62834eb1 Fixed iptables creation failure due to an excessively long label (#2366)
  • c5d8ebac use existing node switch cidr instead of the configured one (#2359)
  • 092aa083 Do not wait pod deletion one by one to accelerate install (#2360)
  • 1974f8b1 Change log level (#2362)
  • 13f345da change log level (#2356)
  • 5bd51760 build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1 (#2357)
  • 3b466d2d simplify github actions workflows (#2338)
  • 8fe8bc58 update go version to v1.20 (#2312)
  • 90f504c7 build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0 (#2353)
  • a9753c34 build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0 (#2349)
  • 6e21a93e chore: no need to wait 30 seconds before kube-ovn-cni get ready. (#2339)
  • f8b97e72 do not remove link local route on ovn0 (#2341)
  • 79584c43 fix encap ip when the tunnel interface has multiple addresses (#2340)
  • 156d5976 fix legacy network policy err (#2313)
  • 9c51bd9e enqueue endpoint when handling service add event (#2337)
  • cdf54997 Add neighbor-address format check for kube-ovn-speaker (#2335)
  • b0b46948 add ovnext0 inside ns on gw node for ecmp static route with bfd (#2237)
  • 4ca994bf OVN LB: add support for SCTP protocol (#2331)
  • ea14e91f fix getting service backends in dual-stack clusters (#2323)
  • 937d3ced e2e: skip case of switching session affinity (#2328)
  • eb2b36a5 fix k8s networking dns e2e (#2325)
  • 1c97f58a Add the bgp router-id format check (#2316)
  • f7f2375f perform the gateway check but ignore the result when the annotation of subnet is ‘disableGatewayCheck=true’ to make sure of the first network packet (#2290)
  • 0bd7c7e5 perf: use empty struct to reduce memory usage (#2327)
  • b2eaea00 split netpol cases (#2322)
  • 40b5890a feat: support default service session stickiness timeout (#2311)
  • 83685b5a feat: configure routes via pod annotation (#2307)
  • c8d443ef build(deps): bump github.com/docker/docker (#2320)
  • 4e2fe310 e2e: do not test versions prior to 1.11 for ovn-ic update (#2319)
  • 0d2aa03c ovndb: use Local_Config to configure listen addresses (#2299)
  • 87bacf5f chore: improve the list style in Markdown (#2315)
  • 8c1edc80 fix egress node and gateway acl should apply after lb. (#2310)
  • 22cc9337 fix kube-ovn-controller crash on startup (#2305)
  • b6eb7ce2 build(deps): bump google.golang.org/grpc from 1.52.3 to 1.53.0 (#2308)
  • 5ca2a5c8 build(deps): bump golang.org/x/sys from 0.4.0 to 0.5.0 (#2309)
  • eb31a178 ignore e2e for subnet enableEcmp before v1.12.0 (#2306)
  • f81c43a1 fix u2o code err (#2300)
  • 993fefaa set join subnet.spec.enableLb to nil (#2304)
  • d1d10972 fix image tag in helm chart (#2302)
  • 77cf5e9b update trivy deprecated arg and the ignored CVE. (#2296)
  • 9b85bbac move enableEcmp to subnet (#2284)
  • 87eacf59 build(deps): bump sigs.k8s.io/controller-runtime from 0.14.3 to 0.14.4 (#2301)
  • 971add05 fix gosec ci installation (#2295)
  • ac72f771 delete htb qos priority (#2288)
  • 36da29cb build(deps): bump sigs.k8s.io/controller-runtime from 0.14.2 to 0.14.3 (#2292)
  • ea1df964 ovn northd: fix connection inactivity probe (#2286)
  • 54984d67 fix ct new config error (#2289)
  • 3f0a5008 fix wrong network interface name in gateway check (#2282)
  • 74a7da88 build(deps): bump github.com/docker/docker (#2287)
  • 20e57699 Improve webhook (#2278)
  • f0d91513 add named port support (#2273)
  • 9985ee5c fix access from node to overlay pods when network policy ingress exists (#2279)
  • 2b383400 move enableLb to subnet (#2276)
  • 5712485d build(deps): bump github.com/osrg/gobgp/v3 from 3.10.0 to 3.11.0 (#2280)
  • 805f83ea add V4/V6UsingIPRange and V4/V6AvailableIPRange in subnet status (#2268)
  • 0c74034d skip u2o test case before 1.9 (#2274)
  • eddf18d8 fix network break on kube-ovn-cni startup (#2272)
  • 26c506d8 bump go modules (#2267)
  • e10d076e fix setting mtu for ovs internal port (#2247)
  • 155768a3 bump ovs/ovn versions (#2254)
  • 281242ef use node ip instead of ovn0 ip when accessing overlay pod/svc from host network (#2243)
  • ea8523c6 build(deps): bump google.golang.org/grpc from 1.52.1 to 1.52.3 (#2265)
  • cb20b12e build(deps): bump google.golang.org/grpc from 1.52.0 to 1.52.1 (#2264)
  • 69546ffb build(deps): bump k8s.io/klog/v2 from 2.80.1 to 2.90.0 (#2262)
  • 4d9177f7 build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0 (#2263)
  • cc4bfd54 build(deps): bump k8s.io/sample-controller from 0.26.0 to 0.26.1 (#2260)
  • 8a6ac128 build(deps): bump github.com/docker/docker (#2259)
  • b33086f7 egress networkpolicy acl add option apply-after-lb (#2251)
  • 625a6854 ovn db: add support for listening on pod ip (#2235)
  • 6969dcd8 update cni plugin to 1.2.0 (#2255)
  • 1f995709 build(deps): bump github.com/onsi/gomega from 1.24.2 to 1.25.0 (#2257)
  • 486e8ee2 clean up legacy u2o implement (#2248)
  • 5e684e9d eip status状态切换缓慢 (#2256)
  • 1049d245 build(deps): bump github.com/containernetworking/plugins (#2253)
  • 9092956f fix vip create (#2245)
  • dc731efd improve webhook functions for vpc and subnet (#2241)
  • dfb1cc2b fix syntax errors (#2240)
  • e6549802 add release-1.11 to scheduled e2e (#2238)
  • 6adf8267 fix webhook (#2236)
  • 3f5bd39b fix: ovnic del old AZ after establish the new as name (#2229)
  • b0c17afd prepare for next release
  • 91db26f1 build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 (#2234)

Contributors

  • Alex Jones
  • Daviddcc
  • KillMaster9
  • Longchuanzheng
  • Miika Petäjäniemi
  • Nico Wang
  • Rick
  • bobz965
  • changluyi
  • dependabot[bot]
  • fsl
  • github-actions[bot]
  • gugu
  • hzma
  • jeffy
  • jizhixiang
  • lanyujie
  • liuzhen21
  • lut777
  • mingo
  • qiutingjun
  • shane
  • wangyd1988
  • wujixin
  • xujunjie-cover
  • 夜微澜
  • 张祖建
  • 袁又袁

v1.11.11 (2023-09-25)

  • a98b4b10 set for release 1.11.11
  • 67010837 fix: for existing nic, no need to set the port type to internal (#3243)
  • b183e577 undo delete perl cmd to update release-1.11 image
  • 634a9951 update kubectl and delete perl (#3223)
  • dabea2d9 fix vpc-peer dualstack bug (#3204)
  • 0eb4f794 fix ipam random get (#3200)
  • a71201a4 fix G101
  • 58ebea1d add err log to help find conflict ip owner (#2939)
  • 8246b8b7 underlay: fix ip/route tranfer when the nic is managed by NetworkManager (#3184)
  • febb78f8 fix ovn build (#3166)
  • 0e12c017 chart: fix ovs-ovn upgrade (#3164)
  • cb80f8d9 subnet: fix deleting lr policy on node deletion (#3178)
  • eb9bcd58 delete append externalIds process in initIPAM (#3134)
  • 3ee977a2 move unnecessary init process after startWorkers (#3124)
  • 0857593c underlay: fix NetworkManager operation (#3147)
  • 132660e8 base: remove ovn patch for skipping ct (#3140)
  • 6177d38f delete append externalIds process in initIPAM (#3134)
  • 0b305d98 prepare for the next release
  • fe4cf9e3 add e2e test for ovn db recover (#3118)
  • 89626855 update install.sh

Contributors

  • bobz965
  • hzma
  • 张祖建
  • 袁又袁
  • 马洪贞

v1.11.10 (2023-08-07)

  • 7f111db3 ovn: fix corrupted database file on start (#3112)
  • a11d7e92 update version to v1.11.10
  • 4b56b637 fix u2o policy route generate too many flow tables cause oom
  • 935fa927 distinguish nat ip for central subnet with ecmp and active-standby (#3100)
  • 460655c2 bug_fix if only one port bind to the sg, then unbind the port to the sg ,it will not enforce in port_group (#3092)
  • 2bd75f0a Revert "fix sg"
  • 0400c454 fix sg
  • aca169d2 fix .status.default when initializing the default vpc (#3086)
  • b2b19014 cni-server: fix ovn mappings for vpc nat gateway (#3075)
  • da86070e ovn client: fix sb chassis existence check (#3072)
  • 998e857d ci: do not pin go version (#3073)
  • 8597b902 ci: fix multus installation (#3062)
  • b1717445 ipam: fix ippool with single dual-stack address (#3054)
  • c1a8d92a fix vpc lb init (#3046)
  • 03f94a52 Revert "prepare for next release"
  • 28a4888d set genev_sys_6081 tx checksum off (#3045)
  • 6b0cc730 prepare for next release
  • 8ce77f85 fix ifname start with pod (#3038)
  • a29d00cc static ip in exclude-ips can be allocated normally when subnet's availableIPs is 0 #3031
  • 58eef01e ci: pin go version to 1.20.5 (#3034)
  • 0f3d599b pinger: use fully qualified domain name (#3032)
  • 5400c37d uninstall.sh: fix ipset name (#3028)
  • c7918415 kube-ovn-controller: fix workqueue metrics (#3011)
  • 54a0b1a6 fix subnet finalizer (#3004)
  • f3be5d12 choose subnet by pod's annotation in networkpolicy (#2987)
  • 2279f621 kubectl ko performance enhance (#2975) (#2994)
  • 572a2e85 fix deleting old sb chassis for a re-added node (#2989)
  • abda1560 underlay: fix NetworkManager syncer for virtual interfaces (#2988)
  • ec17b735 underlay: does not set a device managed to no if it has VLAN managed by NM (#2986)
  • 7db9ff12 bump k8s version to v1.26.6 (#2973)
  • cc7768ba base: fix ovn patches (#2972)
  • 7829b873 add detail comment
  • c84a9748 Kubectl ko diagnose perf release 1.11 (#2967)
  • 6325c83e cni-server: reconcile ovn0 routes periodically (#2963)
  • 6ea123a7 uninstall.sh: flush and delete iptables chain OVN-MASQUERADE (#2961)
  • 738c4078 underlay: sync NetworkManager IP config to OVS bridge (#2949)
  • d9bab2e2 typo (#2952)
  • b931b5bf Revert "base: fix ovn build failure (#2926)"
  • d15874e0 Revert "nm not managed only in the change provide nic name case (#2754)" (#2944)
  • 168863cb kubectl ko perf on release-1.11 (#2945)
  • ea5f81a7 controller: fix DHCP MTU when the default network mode is underlay (#2941)
  • 6d883dc9 support set the mtu of dhcpv4_options (#2930)
  • effc1115 u2o support specify u2o ip on release-1.11 (#2937)
  • 94859807 modify lb-svc dnat port error (#2927)

Contributors

  • bobz965
  • changluyi
  • hzma
  • yichanglu
  • 张祖建
  • 袁又袁
  • 马洪贞

v1.11.8 (2023-06-12)

  • d15f003a prepare for next release
  • 3796d1ef base: fix ovn build failure (#2926)
  • 98748f6e bump version number to v1.11.8
  • 0a0d254d fix encap_ip will be lost when we restart the ovs-dpdk node (#2543)
  • 919c8eeb cni-server: clear iptables mark before doing masquerade (#2919)
  • 91b383b0 For eip created without spec.V4ip this field (#2912)
  • b8523fc6 match outgoing interface when perform snat (#2911)

Contributors

  • 张祖建
  • 袁又袁

v1.11.7 (2023-06-05)

  • 0b27996b prepare for release 1.11.7
  • b6b02458 underlay: do not delete patch ports created by ovn-controller (#2851)
  • bed82299 fix gc report error #2886
  • 42a5656c add support of user-defined kubelet directory (#2388)
  • 4d1b12a8 ci: fix valgrind result analysis (#2853)
  • e1b79191 ovs: fix memory leak in qos (#2871)
  • 50cc00d0 prepare for next release

Contributors

  • zhangzujian
  • 夜微澜
  • 张祖建
  • 马洪贞

v1.11.6 (2023-05-25)

  • f071a974 prepare for next release
  • 94644e12 u2o support custom vpc release 1.11 (#2849)
  • 30f4cc30 kubectl-ko: fix trace when u2oInterconnection is enabled (#2836)
  • e50687af ci: detect ovs/ovn memory leak (#2839)
  • 767e102a fix underlay access to node through ovn0 (#2846)
  • ae226e33 iptables: always do SNAT for access from other nodes to nodeport with external traffic policy set to Local (#2844)
  • ef78fee1 delete user tss (#2838)
  • 4dd164ac ci: fix no-avx512 image build
  • f4033e73 ci: fix kube-ovn-base build
  • ea954770 refactor image builds (#2818)
  • ddfedfa1 fix MTU when subnet is using logical gateway (#2834)
  • 1346b0e7 update vpc dns env value
  • 5d8b106a add route for service ip range when init vpc-nat-gw (#2821)
  • cd4ff4f6 fix cleanup order (#2792)
  • 94e7463e add available check for northd enpoint
  • f7a80c90 update release note

Contributors

  • changluyi
  • hzma
  • zhangzujian
  • 张祖建
  • 马洪贞

v1.11.5 (2023-05-10)

  • 632bad30 prepare for release 1.11.5
  • bc4637c0 reorder the deletion to avoid dependency conflict
  • a8539c57 fix ip statistics in subnet status (#2769)
  • 655d5ff2 support disable arp check ip conflict in vlan provider network (#2760)
  • a5720d6f cni-server: wait ovs-vswitchd to be running (#2759)
  • 8a4e97b5 ci: run kube-ovn e2e for underlay (#2762)
  • 87c68683 iptables: use the same mode with kube-proxy (#2758)
  • 944f3049 nm not managed only in the change provide nic name case (#2754)
  • a55db01d update policy route when change from ecmp to active-standby (#2717)
  • ba639824 fix recover db failed using offical doc (#2718)
  • 81b60ac8 fix_base_sg_rule (#2401)
  • e80879c5 add base sg rules for ports (#2365)
  • f90aa398 bump base images
  • abaee01a base: remove patch for fixing ofpbuf memory leak (#2715)
  • 2e800bf2 prepare for release 1.11.4
  • 22367be6 cni-server: do not perform ipv4 conflict detection during VM live migration (#2693)
  • 49dfd39e fix can not clean the last abandoned snat table (#2701)
  • 6ec1982a replace StrategicMergePatchType with MergePatchType (#2694)
  • 320f5670 fix build error by partially revert 951f89c5
  • d4eabab0 ovn-controller: do not send GARP on localnet for Kube-OVN ports (#2690)
  • 951f89c5 adapt ippool annotation (#2678)
  • 96e8be6d netpol: fix packet drop casued by incorrect address set deletion (#2677)
  • 6b95cecd fix pg set port fail when lsp is already deleted (#2658)
  • 5ad2bafe add subnetstatus lock for handleAddOrUpdateSubnet (#2669)
  • f314ab58 broadcase free arp when pod setup
  • e29fdc96 delete sync user (#2629)
  • 621423f7 Add ipsec package to image release 1.11 (#2618)
  • 9c80381b ci: deploy multus in thick mode (#2628)
  • 2731e8e3 libovsdb: use monitor_cond as the monitor method (#2627)
  • 71a8ffe3 ci: fix multus installation (#2622)
  • 786fea90 ovs: fix dpif-netlink ofpbuf memory leak (#2620)
  • d9647b4d update Dockerfile.debug
  • 5b099ed2 ci: fix multus installation (#2604)
  • fdc2301b cut invalid OVN_NB_DAEMON to make log more readable (#2601)
  • 02b1e140 unittest: fix length assertion (#2597)
  • 209246bd bump base image
  • d2f1a801 security: remove CVE-2022-29526 from .trivyignore
  • 7a69233f base: fix CVE-2022-3294 (#2594)
  • ea46479d underlay: get address/route before setting nm managed to no (#2592)
  • d67d40d3 base: fix ovs patches (#2590)
  • ed14bc2d ci: bump kind image to v1.26.3 (#2581)
  • 9c01b1bd move ipam.subnet.mutex to caller (#2571)
  • fb70f939 fix: memory leak in IPAM caused by leftover map keys (#2566)
  • f4f990b3 fix ovn-bridge-mappings deletion (#2564)
  • e4242a01 fix go mod list (#2556)
  • 4c08bfe0 do not set device unmanaged if NetworkManager is not running (#2549)
  • 39c99c6e fix update dnat rules not effect correctly (#2518)
  • 7eb7ed6e underlay: fix network manager operation (#2546)
  • 8f67a324 controller: fix apiserver connection timeout on startup (#2545)
  • 4b8654db underlay: delete altname after renaming the link (#2539)
  • 8d0d56ec underlay: fix link name exchange (#2516)
  • f22535e3 fix changging the stopped vm's subnets, the vm cann't start normally (#2463)
  • 5bd71ba8 add kubevirt multus nic lsp before gc process (#2504)
  • d9ccaf7b update for release v1.11.3

Contributors

  • bobz965
  • changluyi
  • hzma
  • yichanglu
  • zhangzujian
  • 夜微澜
  • 张祖建
  • 袁又袁
  • 马洪贞

v1.11.3 (2023-03-18)

  • 9fe900fc prepare for release v1.11.3
  • d70bf21f ensure address label is correct before deleting it (#2487)
  • df493a8b add node to addNodeQueue if required annations are missing (#2481)
  • b4145855 fix ips CR not found due to etcd error (#2472)
  • 63afc1f6 ci: fix ovn-ic installation (#2456)
  • f790d5a1 do not set subnet's vlan empty on failure (#2445)
  • 0ff516bb change cni version from v1.1.1 to v1.2.0
  • b0935b7c fix ovn-speaker router bug (#2433)
  • 7f6ba2b1 fix chart install/upgrade e2e (#2426)
  • e0fe08c5 ci: fix cilium chaining e2e (#2391)
  • 365e8f47 Modify the pod scheduling of vpcdns (#2420)
  • 13c7319f fix: python package issues
  • 7100e157 update ipv6 security-group remote group name (#2389)
  • 909c1b6b Fix routeregexp ipv6 (#2395)
  • 20cdc9d8 ci: fix ref name check (#2390)
  • af25e6ad bump base images
  • 064df251 ci: skip netpol e2e automatically for push events (#2379)
  • d5005b74 ci: make path filter more accurate (#2381)
  • 0f308f34 fix service dual stack add/del cluster ips not change ovn nb
  • 4a70baef ci: fix path filter for windows build (#2378)
  • 37662226 e2e: run specs in parallel (#2375)

Contributors

  • Daviddcc
  • KillMaster9
  • changluyi
  • hzma
  • jeffy
  • yichanglu
  • zhangzujian
  • 张祖建

v1.11.2 (2023-02-22)

  • 67fd6efb fix CVE-2022-41723
  • 354485b3 bump base images
  • 5b58c8f8 fix: ovs-ovn should reboot now (#2298)
  • eae134e9 ci: fix default branch test (#2369)
  • ef6c1cd6 fix github actions workflows (#2363)
  • 8bb647da simplify github actions workflows (#2338)
  • 8e8417cc Fixed iptables creation failure due to an excessively long label (#2366)
  • 50059147 Improve webhook (#2278)
  • 0f8c04e9 eip status状态切换缓慢 (#2256)
  • 5603a98f fix vip create (#2245)
  • 8fc8e0ce improve webhook functions for vpc and subnet (#2241)
  • 9cc91bbb fix webhook (#2236)
  • 3b8da6ad use existing node switch cidr instead of the configured one (#2359)
  • 87b8bdec Release 1.11 merge netpol (#2361)
  • 578b3921 Release 1.11 merge netpol (#2355)
  • 14a8b9bb prepare for 1.11.2
  • 96520721 do not remove link local route on ovn0 (#2341)
  • f83af744 fix encap ip when the tunnel interface has multiple addresses (#2340)
  • 746e5d0a enqueue endpoint when handling service add event (#2337)
  • 3e9d928b Add neighbor-address format check for kube-ovn-speaker (#2335)
  • f7156c9d OVN LB: add support for SCTP protocol (#2331)
  • 354fd400 fix getting service backends in dual-stack clusters (#2323)
  • 1fe492d5 fix github actions workflow
  • 0133c48f perform the gateway check but ignore the result when the annotation of subnet is ‘disableGatewayCheck=true’ to make sure of the first network packet (#2290)
  • a5cce744 Add the bgp router-id format check (#2316)

Contributors

  • KillMaster9
  • changluyi
  • jeffy
  • lut777
  • qiutingjun
  • zhangzujian
  • 张祖建

v1.11.1 (2023-02-09)

  • 1008299a prepare for release v1.11.1
  • 3c0f64bc fix: ovnic del old AZ after establish the new as name (#2229)
  • 57f2c17d fix u2o code err
  • cd3c333f fix kube-ovn-controller crash on startup (#2305)
  • 8c4b917f fix Makefile
  • cdcd9a9c delete htb qos priority (#2288)
  • 602ee37d fix gosec ci installation (#2295)
  • b367218b ovn northd: fix connection inactivity probe (#2286)
  • b90b552a fix ct new config error
  • a6663031 fix network break on kube-ovn-cni startup (#2272)
  • 22ff7353 fix setting mtu for ovs internal port (#2247)
  • 4f957c6a fix gosec installation
  • 5ed45f38 fix ovn patches
  • 1eedbb16 ovn db: add support for listening on pod ip (#2235)
  • 996faa1f Revert "prepare for next release"
  • 0bf23975 prepare for next release

Contributors

  • changluyi
  • lut777
  • zhangzujian
  • 张祖建
  • 马洪贞

v1.11.0 (2023-01-09)

  • a49d1819 Update CHANGELOG.md for v1.11.0
  • 59bc50f7 feat: add helm upgrade e2e (#2222)
  • 25f89737 fix: now route with connected/static will all be sync (#2231)
  • c2467d21 add enable-metrics arg to disable metrics (#2232)
  • 67024ec5 add u2o test case (#2203)
  • f5d80110 add more args to break test server
  • f5b9eef8 add release-1.8/1.9/1.10 to scheduled e2e (#2224)
  • ab5a2c82 cni-server: fix waiting for routed annotation (#2225)
  • 6fd9ea0c build(deps): bump golang.org/x/sys from 0.3.0 to 0.4.0 (#2223)
  • cbde65e2 feature: detect ipv4 address conflict in underlay (#2208)
  • 64d6f24f fix git ref name in e2e (#2218)
  • b0cd45c6 fix e2e for v1.8 (#2216)
  • 5843892b some fixes for e2e testing (#2207)
  • b6a11789 build(deps): bump github.com/osrg/gobgp/v3 from 3.9.0 to 3.10.0 (#2209)
  • 4f08d941 distinguish ippool process for dualstack and normal ippool situation (#2204)
  • 098a8212 u2o feature (#2189)
  • c0d76fd8 ovn nb and sb can't bind lan ip in ssl (#2200)
  • 1489b65c build(deps): bump sigs.k8s.io/controller-runtime from 0.14.0 to 0.14.1 (#2199)
  • 16002a28 local ip bind to service (#2195)
  • 1407eba2 refactor e2e testing (#2078)
  • 86fab667 fix: ovs gc just for pod if (#2187)
  • 1a43c6de update docs link in install.sh (#2196)
  • 02feb9a9 fix lr policy for default subnet with logical gateway enabled (#2177)
  • 3e129fe1 sync delete pod process from release-1.9 (#2190)
  • b6e50706 fix: update helm 1.11.0 (#2182)
  • 3fb825c8 reserve pod eip static route when update vpc (#2185)
  • 159fd9f0 ignore conflict check for pod ip crd (#2188)
  • 4d6ad644 remove unused subnet status fields (#2178)
  • 484fe97a fix:react leader elect (#2167)
  • c914fe78 fix base/windows build (#2172)
  • 6a8fc2f3 add metric interface_rx_multicast_packets (#2156)
  • 2b5e28ff build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2 (#2168)
  • 0992f36f update wechat link
  • d45a0440 build(deps): bump github.com/Microsoft/hcsshim from 0.9.5 to 0.9.6 (#2161)
  • adecee76 ci: refactor previous push multi arch (#2164)
  • 5e4955c9 security: we should check all the vulnerabilities that can be fixed (#2163)
  • 502a25bf An error occurred when netpol was added in double-stack mode (#2160)
  • dbbbddc1 add process for delete networkpolicy start with number (#2157)
  • 26f407fc security remove private key (#2159)
  • 57457bd4 add scheduled e2e testing (#2144)
  • 5444126a northd: fix race condition in health check (#2154)
  • 755a46a6 add check for subnet cidr (#2153)
  • c627468a delete nc cmd in image (#2148)
  • 207a52cd bump k8s to v1.26 (#2152)
  • a4a8b5ad add benchmark test for ipam (#2123)
  • 4b1e78c2 update: add YuDong Wang into MAINTAINERS (#2147)
  • 39ee1e7c build(deps): bump k8s.io/sample-controller from 0.25.4 to 0.25.5 (#2146)
  • 7aa9bdbc delete nc in base image (#2141)
  • aab79cb8 update go modules (#2142)
  • fa32177d delete ip crd base on podName (#2143)
  • 4072eb76 fix vpc spec external not true after init external gw (#2140)
  • 51907e02 refactor ipam unit test (#2126)
  • ad56e98f build(deps): bump github.com/k8snetworkplumbingwg/network-attachment-definition-client (#2139)
  • 012ab59e some optimization for provider network status update (#2135)
  • c410d8b4 simplify iptables eip nat (#2137)
  • ef4e7555 kind: support to specify api server address/port (#2134)
  • 9bbf5e43 kubectl-ko: fix registry/version (#2133)
  • 2156ef0d check if subnet cidr is correct (#2136)
  • f58c88fc fix: sometimes alloc ipv6 address failed sometimes ipam.GetStaticAddress return NoAvailableAddress (#2132)
  • 27d22b7f fix: delete static route should consider dualstack (#2130)
  • 9b38bf7f build(deps): bump github.com/osrg/gobgp/v3 from 3.8.0 to 3.9.0 (#2121)
  • f9f63cae build(deps): bump github.com/Wifx/gonetworkmanager from 0.4.0 to 0.5.0 (#2122)
  • 67b4dc1b build(deps): bump golang.org/x/time from 0.2.0 to 0.3.0 (#2120)
  • 78584b7c fix: vlan gw clean in 2 scene (#2117)
  • b8e15e19 optimize provider network (#2099)
  • 66e96b8e build(deps): bump golang.org/x/sys from 0.2.0 to 0.3.0 (#2119)
  • 625e3173 fix removing default static route in default vpc (#2116)
  • 141c4c35 fix: eip deletion (#2118)
  • 86f75c83 fix: ecmp route keep delete and recreate (#2083)
  • 15fd547b fix policy route for subnets with logical gateway (#2108)
  • c7549d41 build(deps): bump github.com/emicklei/go-restful/v3 from 3.9.0 to 3.10.1 (#2113)
  • c42dae31 refactor function name isIPAssignedToPod to isIPAssignedToOtherPod (#2096)
  • c52f384e build(deps): bump github.com/onsi/gomega from 1.24.0 to 1.24.1 (#2111)
  • fc80d592 fix: logical gw underlay gw subnet not clean (#2114)
  • 5862b020 build(deps): bump github.com/osrg/gobgp/v3 from 3.6.0 to 3.8.0 (#2110)
  • 4b4bdb3c build(deps): bump sigs.k8s.io/controller-runtime from 0.12.3 to 0.13.1 (#2109)
  • 684d1c75 fix go mod (#2107)
  • 8ac8cc4e build(deps): bump github.com/onsi/ginkgo/v2 from 2.3.1 to 2.5.1 (#2103)
  • 12f2f404 build(deps): bump k8s.io/sample-controller from 0.24.4 to 0.25.4 (#2101)
  • 5caec703 build(deps): bump github.com/Microsoft/go-winio from 0.5.2 to 0.6.0 (#2104)
  • e2eae04c build(deps): bump google.golang.org/grpc from 1.49.0 to 1.51.0 (#2102)
  • 8f4bf43a build(deps): bump github.com/Microsoft/hcsshim from 0.9.4 to 0.9.5 (#2100)
  • 47fe3eef Create dependabot.yml
  • 5bed4af1 replace klog.Fatalf with klog.ErrorS and klog.FlushAndExit (#2093)
  • 2652bcfe fix: slow vip finalizer operation (#2092)
  • 4486e7fe ko-trace: support ARP request/reply (#2046)
  • a659f2e5 fix: cni response missing sandbox field (#2089)
  • 88500fa5 check if externalIds map is nil when add node as gw for centralized subnet (#2088)
  • 47d3872c fix: del createIPS (#2087)
  • d1616385 fix: add opts for ips del (#2079)
  • 4da9e4e5 fix ovs bridge not deleted cause by port link not found (#2084)
  • 7344578e fix libovsdb issues (#2070)
  • 9c292c00 ipset: fix unknown ipset data attribute from kernel (#2086)
  • def11081 fix: vpc lrp reset after restart kube-ovn-controller (#2074)
  • 0c668432 fix: add del bash for redundant ips (#2063)
  • 1c334c8d refactor: add unknown config to logic switch port (#2067)
  • 419c385b ovs-dpdk supports adding bond for multi-NICs (#2064)
  • aef4cd3a fix OVN LS/LB gc (#2069)
  • 8aa724eb fix: vip ipam not recover all (#2071)
  • 514b7666 bug-fix: make kind-reload invalid (#2068)
  • 657dbf60 remove no need params svcasname (#2057)
  • 1fcfbc42 Fix:hybrid-dpdk with vxlan tunnel mode,The OVS node does not create a VXLAN tunnel to the OVS-DPDK node (#2065)
  • a7ed4429 update ipv6 address for vpc peer (#2060)
  • db4fd629 perf: reduce controller init time (#2054)
  • 34f42617 reflactor note (#2053)
  • b22e66ad fix: replace replace with add to override existing route (#2052)
  • c0874158 refactor Makefile (#1901)
  • ea22c1ac pass klog verbosity to libovsdb (#2048)
  • 8a29023d ovs: fix reaching resubmit limit in underlay (#2038)
  • db796b43 sync crd yamls (#2040)
  • f8f5a4c3 add helm and e2e test (#2020)
  • 5f40c222 fix: add unitest (#2030)
  • 68611051 fix: pod not add finalizer after add iptables fip (#2041)
  • 75da1603 feat: ovn eip snat fip (#2029)
  • 73075605 fix: vpc and vpc nat gw not clean (#2032)
  • 79a5ef34 update CHANGELOG.md
  • e7fb2089 fix pinger namespace error (#2034)
  • 4abd912f iptables: avoid duplicate logging (#2028)
  • 3fb645c9 fix: gateway route should stay still when node is pingable (#2011)
  • 92b9c8c3 update np name with character prefix (#2024)
  • 39497855 bump kind and node image versions (#2023)
  • 56992c86 fix ovn nb/sb health check (#2019)
  • bf93c458 fix ovs fdb for the local bridge port (#2014)
  • 57830154 fix go version
  • ad7cfe87 perf: add debug info for perf trace (#2017)
  • 16a95836 fix: not append finalizer (#2012)
  • 688fd5e2 do not need to delete pg when update networkpolicy (#1959)
  • c4d8a2f3 test: add test-server to collect packet lost during upgrade (#2010)
  • f89908e7 support create iptables fip and eip automatically if pod enable fip (#1993)
  • ab80fd88 ci: upgrade deprecated actions (#2004)
  • de5ef511 fix: make ip deletion the same as creation (#2002)
  • bfcc952c fix: Add support for Mellanox NIC (#1999)
  • f4c977f1 fix: nat gw not enqueue its resources (#1996)
  • 32f65f81 fix: delete fiprule failed at first time (#1998)
  • eaa936b3 fix typo (#1994)
  • dd3790ac feat: now interface for containerd could be inspected (#1987)
  • fee5bfd3 fix: snat conntrack race (#1985)
  • e1f7d72c add check of write to ovn sb db for ovn-controller (#1989)
  • 892aa759 fix grep matching device in routes (#1986)
  • 113f62f6 delete pod after TerminationGracePeriodSeconds (#1984)
  • 87996f75 ovs: fix waiting flows in underlay networking (#1983)
  • eea78886 feature: support default vpc use nat gw pod as cust vpc (#1979)
  • 3d2c7a59 ovn db: recover automatically on startup if db corruption is detected (#1980)
  • 9ff3b9c0 fix: modify src route priority (#1973)
  • 57c75c1e upgrade ovs-ovn pod by generation version instead of chart version (#1960)
  • b9e98e52 avoid concurrent subnet status update (#1976)
  • ea854d46 fix metrics name (#1977)
  • 15f676f6 add vm pod to ipam by ip when initIPAM (#1974)
  • afe06d81 validate nbctl socket path in start-controller.sh (#1971)
  • 3796a582 skip CVE-2022-3358 (#1972)
  • 80aab2ea fix version mismatch between the Ginkgo CLI and the imported package (#1967)
  • b7863bdb ovs: fix mac learning in environments with hairpin enabled (#1943)
  • 95939ca4 fix: add default deny acl (#1935)
  • de3d65c0 Fix registry for ovn-central container in install.sh (#1951)
  • c8d22d2c ovs: add fdb update logging (#1941)
  • f1f6642b add chart version check when upgrade ovs-ovn pod (#1942)
  • 73fde2ce fix underlay e2e testing (#1929)
  • 38956b6c set leader flag when get leader (#1939)
  • af6973fe set ovsdb-server vlog level to avoid warnings caused by ovs-vsctl (#1937)
  • a3292078 fix: UpdateNatRule will error when logicalIP, externalIP is different protocol; replace : to \: when IPv6 in ovs cli.
  • 76541ef1 fix: noAllowLiveMigration port can't sync vips (#7)
  • 474206be fix: add pod not update vip virtual port
  • 596741bc fix: delete chassis (#1927)
  • 395a3554 fix: pod mistaken ls label (#1925)
  • 797100ed ignore pod without lsp when add pod to port-group (#1924)
  • 1a49e738 add network partition check in ovn probes (#1923)
  • 16c0ed9f fix: fip unbind can't take effect immediately when conntrack record exists (#1922)
  • 606e6f62 No need to change deivceID to sriov_netdevice. (#1904)
  • 76dd9afa update ns annotation when subnet cidr changed (#1921)
  • 8d1ce420 fix EIP/SNAT on dynamic Pod annotation (#1918)
  • 4882c354 fix: eip and nat crd can delete even if nat gw pod deleted and ipatab… (#1917)
  • d8886d13 fix missing crd (#1909)
  • 8d2991e3 Nat gw support toleration (#1907)
  • b3bbe1d4 Update USERS.md (#1908)
  • dbe4ebb3 fix typo (#1897)
  • 8d15497a fix: Make the /sys directory in ovs-ovn-dpdk pod writable (#1899)
  • 5befab46 fix: failed to add eip (#1898)
  • 7fae28ae fix: gatewaynode might be null (#1896)
  • 57edfe41 ci: increase golangci-lint timeout (#1894)
  • 07f12c2d update Go to version 1.19 (#1892)
  • e5878ff9 fix: api rollback (#1895)
  • 82db50fe ci: use concurrency to ensure that only a single workflow (#1850)
  • 83b867ab kubectl-ko: turn off pipefail for ovn leader check (#1891)
  • 959a64dc kubectl-ko: fix trace for KubeVirt VM (#1802)
  • 10fd3330 fix duplicate logs for leader election (#1886)
  • 13ebb855 fix setting ether dst addr for dnat (#1881)
  • b1485035 change the prtocol string to const (#1887)
  • 7e56931f refactor iptables rules (#1868)
  • 14898dd3 cni should handler unmont volume, when delete pod. (#1873)
  • 031ed031 delete and recreate netem qos when update process (#1872)
  • dedd5aaa feat: check configuration (#1832)
  • 97b41127 security: conform to gosec G114 (#1860)
  • 2dfb6e72 update CHANGELOG.md
  • b6450b2f e2e: add timeout for waiting resources to be ready (#1871)
  • e1656752 upgrade to Ginkgo v2 (#1861)
  • 0adecb0c feat: reduce downtime by increasing arp cache timeout
  • c24f678b feat: reduce wait time by counting the flow num.
  • 05611aa7 fix: missing stop_ovn_daemon args
  • 6ab837c4 fix: nat gw pod should set default gw to net1 so that to access public (#1864)
  • b08765dc delete log severity for drop acl when update networkpolicy (#1863)
  • e13c4ef1 ovs: fix log file descriptor leak in monitor process (#1855)
  • 8a235e9e fix: dnat port not use whole words to check (#1854)
  • 34e02ebb fix ovs-ovn logging (#1848)
  • 2a2a32f9 fix ovn dhcp not work with ovs-dpdk (#1853)
  • 44e41250 docs: Update USERS.md (#1851)
  • 51f491f2 fix: multus macvlan ipvlan use kube-ovn ipam,but ip not inited in init-ipam (#1843)
  • 8ef6c01c fix underlay e2e (#1828)
  • c33276fd fix arping error log (#1841)
  • 69cf5ca5 ko: fix kube-proxy check (#1842)
  • 5012ff3e base: use patch from OVN upstream (#1844)
  • 07773cb0 ci: switch environment to ubuntu-20.04 (#1838)
  • eded5516 ci: split image builds to speed up jobs (#1807)
  • 656bd46c ci: update Go cache to speed up jobs (#1829)
  • 57d74bff windows: fix ovs/ovn versions and patches (#1830)
  • babd8021 修改 ovs-ovn-dpdk 容器镜像编译打包,解决容器中 ovs 运行不正常:无法添加物理网卡,无法创建 vhostuserclient port 问题 (#1831)
  • 0ed5c924 support adding routes in underlay Pods for access to overlay Pods (#1762)
  • 013549ab update centralized subnet gateway ready patch operation (#1827)
  • 9937ef87 remove pod security policy (#1822)
  • 725957a7 fix duplicate log for tunnel interface decision (#1823)
  • 2e64133c update ovs/ovn version to fix hardware offload (#1821)
  • 9c87d9d1 fix: use full longest word to match full ip about dnat (#1825)
  • 385064a0 update centralize subnet gatewayNode until gw is ready (#1814)
  • 4944db75 initialize IPAM from IP CR with empty PodType for sts Pods (#1812)
  • d41c043d feat: add editable ovn-ic (#1795)
  • ddcdfb9e kubectl-ko: fix missing env-check (#1804)
  • 8b2df588 kubectl-ko: fix destination mac (#1801)
  • e8816e96 fix cilium e2e (#1759)
  • bc380415 abort kube-ovn-controller on leader change (#1797)
  • 26e77ead avoid invalid ovn-nbctl daemon socket path (#1799)
  • e7064062 update CHANGELOG.md
  • 70f1b141 Perf/memleak (#1791)
  • 225da25e delete htb qos when releated annotation is deleted (#1788)
  • 8db05a1f Fix nag gw gc (#1783)
  • 277f6f69 fix iptables for services with external traffic policy set to Local (#1773)
  • 42812b92 perf: reduce metrics labels (#1784)
  • 9ffb9d22 northd: remove lookup_arp_ip actions (#1780)
  • 9efd4bb2 fix: 5ms is too short for eip and nats creation (#1781)
  • 80425b7c Lb-svc supports custom VPCs (#1779)
  • cd00ddb6 fix ovnic e2e (#1763)
  • 51bf142f fix iptables for service traffic when external traffic policy set to local (#1728)
  • 916600f6 set sysctl variables on cni server startup (#1758)
  • c10c7118 fix: add omitempty to subnet spec (#1765)
  • 2dd46e69 perf: replace jemalloc to reduce memory usage (#1764)
  • 35513157 avoid patch interface deletion & recreation during restart (#1741)
  • e7ce68bb feature: support exchange link names of OVS bridge and provider nic in underlay networks (#1736)
  • 5254731f dpdk-v2 ,--with-hybrid-dpdk 修改 Dockerfile.base-dpdk 解决 编译安装 ovs-dpdk 正常运行 (#1754)
  • 3717c6cb fix: Adjust order for Log and output err when get NatRule faild. (#1751)
  • f7358337 only support IPv4 snat in vpc-nat-gw when internal subnet is dual (#1747)
  • 99c53d29 update README.md
  • 7c4293eb docs: update USERS.md (#1743)
  • a8ed4bce style: import group ordering. (#1742)
  • bcafb10c enqueue subnets after vpc update (#1722)
  • 3af85162 do not add subnet not processed by kube-ovn to vpc (#1735)
  • 7ac7b592 dpdk-v2 ,--with-hybrid-dpdk qemu 创建 sock 权限问题 (#1739)
  • 96683cb1 fix: const extGw may expired, after subnet updated, so use ipam subne… (#1730)
  • 861cf05d fix service not working when a node's IPv6 address is before the IPv4 address (#1724)
  • daaddba2 update pr template
  • ce40f7ed fix: If pod has snat or eip, also need delete staticRoute when delete pod. (#1731)
  • 3ff586ec optimize lrp create for subnet in vpc (#1712)
  • f582a11b fix: cancel delete staticroute when it's used by NatRule (#1733)
  • 3c7588bf fix: wrong info when update subnet from dual to ipv4 or ipv6. (#1726)
  • d1b291ed change: add newline at end of file (#1717)
  • 26260c91 add kernel prerequisite for Rocky Linux 8.6 (#1713)
  • 2fd8e41e Add CODE_STYLE.md (#1711)
  • 3b9111f9 Change system-cluster-critical to system-node-critical to prevent pods of DaemonSet type from being (#1709)
  • e8877f1d Develop custom vpc-dns (#1662)
  • ac01a603 fix CVE-2022-30065 (#1710)
  • 4b13888d fix: add and set ENABLE_KEEP_VM_IP=true to keep vm ip (#1702)
  • fe18db30 update CHANGELOG.md
  • 1ab55056 fix overlay MTU in vxlan/stt tunnels (#1693)
  • c9d9923e fix: response has no gw when create nic without default route (#1703)
  • b52655fc add note in install.sh for install --with-hybrid-dpdk(dpdk-v2). (#1699)
  • 4530a435 ignore ovsdb-server/compact error: not storing a duplicate snapshot (#1691)
  • c4e91cbd Get latest vpc data from apiserver instead of cache (#1684)
  • 45bc2f7e support kubernetes v1.24 (#1553)
  • 48d914e7 update priority range in htb qos (#1688)
  • 41bdcd05 fix: clean vip eip snat dant fip in cleanup.sh (#1690)
  • c2cea885 update: add Bingbing Zhang into MAINTAINERS (#1687)
  • a38dbb5d fix: move away words that is considered offensive after k8s v1.20.0 (#1682)
  • 76edad08 update CHANGELOG.md
  • e4575c88 add upgrade-ovs script (#1681)
  • b3c32210 fix: change ovn-ic static route to policy (#1670)
  • db3b9f7f Delete pod if subnet of the pod's owner(sts/vm) updated (#1678)
  • 533859fe Develop switch lb rule (#1656)
  • 8cb6e36d do not snat packets only for subnets with distributed gateway when external traffic policy is set to local (#1616)
  • 86ecfd2d refactor: extract external routes from eip func, make it the same as … (#1671)
  • 62ddfda6 add loadbalancer service (#1611)
  • b174b4f4 bgp: consolidate service check and use service const (#1674)
  • 24786f48 security: disable pprof by default (#1672)
  • 3191d8c8 fix bgp: sync service cache (#1673)
  • f1226682 fix iptables for direct routing (#1578)
  • 2b615f33 feature: support pod use static vip (#1650)
  • d6902485 fix: kubectl-ko does't work when ovn-nb, ovn-sb and ovn-northd master slave Switchover (#1669)
  • b4f89010 mount modules for auto load ip6tables moudles (#1665)
  • 72fccd7e update docs links
  • bcec46a3 fix: subnet failed when create without protocol (#1653)
  • eddce759 ignore pod not scheduled when reconcile subnet (#1666)
  • a158f8d6 fix libovsdb (#1664)
  • 200c5317 fix ovs-ovn not running on newly added nodes (#1661)
  • 4616285c fix get security group name by external_ids (#1663)
  • 993ae20c fix:can not delete pod with sriov vf (#1654)
  • 9a180f59 add policy route when add subnet (#1655)
  • a93f211f update CHANGELOG.md
  • cf1c2017 fix: no need routed when use v1.multus-cni.io/default-network (#1652)
  • bcfbe8c6 docs: add GOVERNANCE.md and SECURITY.md
  • c2b9eeb4 fix: should go on check ip after occupied ip (#1649)
  • 9d0cefb5 set ether dst addr for dnat on logical switch (#1512)
  • a9d5e50d docs: update README.md
  • d71d1f69 CI: delete resources in order to avoid a long time waiting for subnet deletions. (#1643)
  • fe1ebe06 ci: fix golangci-lint (#1639)
  • 89514c9c Update install.sh (#1645)
  • 4c8c0a39 fix: make sure pod annotation switch is the first choice to allocate ip, and fix vpc nat sts not delete (#1640)
  • ae8bc1b4 docs: update docs link
  • 0f91a61e set networkpolicy log default to false (#1633)
  • 5c857350 update policy route when join subnet cidr changed (#1638)
  • 9ac8797b fix: diskfull may lead to wrong raft status for ovs db (#1635)
  • 011eba28 ci: update trivy options (#1637)
  • 3d82780e fix no interface report to multus cni, missing in k8s.v1.cni.cncf.io/network[s]-status (#1636)
  • c953b8f3 change vp gw pod workload from deployment to statefulset (#1630)
  • 6238695f increase initial delay of ovs-ovn liveness probe (#1634)
  • de99e826 fix: cleanup should ignore patch failed (#1626)
  • 8c946a4c delete "allow" policy route on subnet deletion (#1628)
  • 75ece0e0 wait ovn-central pods running before delete ovs-ovn pods (#1627)
  • f55e32b3 vip, eip support ipv6 vip count (#1624)
  • b458bf78 ci: auto changelog now (#1625)
  • fce2cf17 get dbstatus for all ovn-central pod (#1619)
  • be66af4b refactor: use ConfigMap resourceVersion to check if ovn-vpc-nat-gw-config changed (#1617)
  • c54cafa5 fix controller exit before process pod update event (#1621)
  • 0ac7e7b9 docs: update ROADMAP.md
  • d6915bd6 fix acl log name too long (exceed 63) (#1612)
  • 0b840398 docs: Add High-level design of ovn-spekaer (#1609)
  • 7ebf36dd docs: Fix allowed subnets (#1610)
  • b2f65cd1 add cni log Prevent "for loop time" approximately health check time (#1606)
  • 71af9531 docs:Add Usage of ovn-speaker for passivemode and ebgp-multihop (#1605)
  • aa456623 update static ip docs (#1607)
  • 1400d5b5 Modify the next hop calculation method for kube-ovn-speaker (#1604)
  • bc86ec86 fix static ip error in dual stack (#1598)
  • 7fdb4bc6 ci: build amd64 images without avx512 (#1584)
  • b7453796 Add ebgp-multihop function for kube-ovn-speaker (#1601)
  • 6dd2f0ae monitor dns in cilium e2e (#1597)
  • 75cfe414 Add passivemode for kube-ovn-speaker (#1600)
  • 05bddc6a Bump github.com/emicklei/go-restful/v3 from 3.7.4 to 3.8.0 (#1599)
  • 5d54ade9 docs: fix the kind name (#1593)
  • 4053d46b Support CNI VESION command (#1596)
  • 34dc29d6 update ovs health check, delete connection to ovn sb db (#1588)
  • d891a84b fix ovn-ic doc err (#1590)
  • 5507440b fix: all cluster pod will be in podadd queue (#1587)
  • 990e291e feat: add args for gc/inspect interval (#1572)
  • ea2686bf fix: Do not Recreate Logical_Router_Port when Vpc recreated (#1570)
  • c651a2fc optimized initialization and gc for the chassis (#1511)
  • f5d5b0be fix pod could not be ready (#1562)
  • 337f6e05 Fix incorrect usage info of 'argExternalGatewayNet' (#1567)
  • d5535f2b fix: delete pod panic when delete vm or statefulset. (#1565)
  • a8330506 fix: clean CRDs introduced by new vpc-nat-gateway (#1563)
  • fb1f59b1 do not gc vm pod lsp when vm still exists (#1558) (#1561)
  • a4c2ef3a do not delete static routes on controller startup (#1560)
  • a13cd1e2 update alpine to v3.16 (#1559)
  • 8b9138ae fix VPC document (#1554)
  • 308e9ecd replace ovn-nbctl daemon with libovsdb in frequent operations (#1544)
  • 43483774 fix exec cmd in vpc nat gateway (#1556)
  • 5c17eeaf CNI: do not return route if nic is not eth0 (#1555)
  • ed8ed00e do not nat packets for incoming traffic when (#1552)
  • 8f8734bd add kubeovn 1.9.2 charts (#1539)
  • d0d9f4ea fix: opt kubectl-ko install solution (#1550)
  • 9d950f67 always set mac address to sriov vf (#1551)
  • 4f1e8121 use leases for leader election (#1529)
  • ae56306b fix: fix db-check bug (#1541)
  • f6b24444 bump version to v1.11.0 (#1545)
  • 24791f45 exit kube-ovn-controller on stopped leading (#1536)
  • 39e5f0a1 fix: update check script for restart ovs-ovn after rebuild ovsdb (#1534)
  • c84a14c6 tmp cancel cilium external svc test (#1531)
  • 5d173010 remove name for default drop acl in networkpolicy (#1522)

Contributors

  • Alex Jones
  • Chris
  • Kaihang Zhang
  • KillMaster9
  • Mengxin Liu
  • Money Liu
  • Noah
  • ShaPoHun
  • Usman Malik
  • Wang Bo
  • Xiaobo Liu
  • bobz965
  • carezkh
  • changluyi
  • dependabot[bot]
  • fanriming
  • gugu
  • halfcrazy
  • huangsq
  • hzma
  • jeffy
  • long.wang
  • lut777
  • pengbinbin1
  • runzhliu
  • shane
  • wangyd1988
  • xujunjie-cover
  • zhouhui-Corigine
  • 刘睿华
  • 尚墨
  • 张祖建
  • 袁又袁

v1.10.10 (2023-03-18)

  • 0c5fd63b prepare for release v1.10.10
  • 3631e4e4 ensure address label is correct before deleting it (#2487)
  • 5ffc237a add node to addNodeQueue if required annations are missing (#2481)
  • 2db927ef remove unused subnet status fields (#2482)
  • 8d08c629 fix ips CR not found due to etcd error (#2472)
  • ec7a3dd5 ci: fix ovn-ic installation (#2456)
  • b4383543 do not set subnet's vlan empty on failure (#2445)
  • 1c21d6e7 fix: missing import netlink
  • a4228c39 change cni version from v1.1.1 to v1.2.0 (#2435)
  • 9e363e41 fix ovn-speaker router bug (#2433)
  • 45830865 fix ovn-ic e2e
  • a1f59628 ci: fix cilium chaining e2e (#2391)
  • 8a584a7c fix: python package issues
  • 8ec90f57 update ipv6 security-group remote group name (#2389)
  • 489d2453 Fix routeregexp ipv6 (#2395)
  • 8f045d75 ci: fix ref name check (#2390)
  • aec96bf2 bump base images
  • 6321f170 ci: skip netpol e2e automatically for push events (#2379)
  • b8ad1177 ci: make path filter more accurate (#2381)
  • 1bc6c814 ci: fix path filter for windows build (#2378)
  • 5c6f394f e2e: run specs in parallel (#2375)
  • 437f8dfa fix CVE-2022-41723
  • edf17620 ci: fix default branch test (#2369)
  • 74f492e9 fix github actions workflows (#2363)
  • 9554adfb simplify github actions workflows (#2338)
  • b62f472e use existing node switch cidr instead of the configured one (#2359)
  • 902b9a35 do not remove link local route on ovn0 (#2341)
  • e8f32ac6 fix encap ip when the tunnel interface has multiple addresses (#2340)
  • c0c9c71e enqueue endpoint when handling service add event (#2337)
  • fe42367a fix getting service backends in dual-stack clusters (#2323)
  • 33e6e41f fix github actions workflow
  • b2d7f735 prepare for release v1.10.9
  • 68b34c91 fix u2o code err
  • 138fc5f1 fix kube-ovn-controller crash on startup (#2305)
  • 50b0c866 fix gosec ci installation (#2295)
  • 50cc03e9 ovn northd: fix connection inactivity probe (#2286)
  • 1ba9977a fix ct new config error
  • ed53f304 fix network break on kube-ovn-cni startup (#2272)
  • e70839b3 fix setting mtu for ovs internal port (#2247)
  • 9195dbd3 fix gosec installation
  • 2a32c9a4 bump base image version
  • 8a532627 fix ovn patches
  • 2a4b9805 ovn db: add support for listening on pod ip (#2235)
  • 0d88edd6 add enable-metrics arg to disable metrics (#2232)
  • 41120b2f fix not building no-avx512 image (#2228)
  • 4320301e u2o feature merge to 1.10 (#2227)
  • c92af9b9 fix windows build
  • 05801fab add release-1.8/1.9/1.10 to scheduled e2e (#2224)
  • 267e4aff cni-server: fix waiting for routed annotation (#2225)
  • 6a9b2d8a release-1.10: refactor e2e (#2213)
  • b2901e8e feature: detect ipv4 address conflict in underlay (#2208)
  • 172e1733 set release v1.10.8

Contributors

  • Daviddcc
  • KillMaster9
  • changluyi
  • hzma
  • zhangzujian
  • 张祖建

v1.10.8 (2023-01-03)

  • d009416a prepare for release 1.10.8
  • b5b73429 ci: add publish action
  • f44c82b1 ovn nb and sb can't bind lan ip in ssl merge to 1.10 (#2202)
  • 7dba66c4 bind local ip release 1.10 (#2198)
  • 2cad0351 fix: ovs gc just for pod if (#2187)
  • 498706c5 update docs link in install.sh (#2196)
  • ea0b77c5 fix lr policy for default subnet with logical gateway enabled (#2177)
  • b9085d54 sync delete pod process from release-1.9
  • 33da2052 reserve pod eip static route when update vpc (#2185)
  • 9bcb2033 ignore conflict check for pod ip crd (#2188)
  • a6e512ae fix base/windows build (#2172)
  • 48b44cf6 add metric interface_rx_multicast_packets (#2156)
  • 4b15aa11 An error occurred when netpol was added in double-stack mode (#2160)
  • 0c4a9f1c add process for delete networkpolicy start with number (#2157)
  • 0ef78a10 northd: fix race condition in health check (#2154)
  • d06f17b8 add check for subnet cidr (#2153)
  • 7aa6ca36 delete nc cmd in image (#2148)
  • 6182cce5 delete ip crd base on podName (#2143)
  • 69ff0eed some optimization for provider network status update (#2135)
  • 5c661d4f kind: support to specify api server address/port (#2134)
  • e91bfedf kubectl-ko: fix registry/version (#2133)
  • c16394bb fix: sometimes alloc ipv6 address failed sometimes ipam.GetStaticAddress return NoAvailableAddress
  • e37f63ae fix: delete static route should consider dualstack (#2130)
  • d17c4ddd optimize provider network (#2099)
  • 3f8687bc fix removing default static route in default vpc (#2116)
  • 9ef032b6 fix: cni response missing sandbox field (#2089)
  • 20130696 fix: eip deletion (#2118)
  • 9d1e526d fix policy route for subnets with logical gateway (#2108)
  • 3a8bb12c replace klog.Fatalf with klog.ErrorS and klog.FlushAndExit (#2093)
  • c0e6b57c fix: del createIPS (#2087)
  • d76976cf check if externalIds map is nil when add node as gw for centralized subnet (#2088)
  • 7d2e8eaa fix ovs bridge not deleted cause by port link not found (#2084)
  • 22abb8a6 fix libovsdb issues (#2070)
  • d916d7b8 ipset: fix unknown ipset data attribute from kernel (#2086)
  • 8e068b26 reflactor: add unkown config to lsp
  • 0af7ac20 fix OVN LS/LB gc (#2069)
  • edc2e645 Fix:hybrid-dpdk with vxlan tunnel mode,The OVS node does not create a VXLAN tunnel to the OVS-DPDK node (#2065)
  • e3e79a74 update ipv6 address for vpc peer (#2060)
  • 15e544f3 perf: reduce controller init time (#2054)
  • 8b06f3f5 fix: replace replace with add to override existing route (#2052)
  • fa3c8c9a pass klog verbosity to libovsdb (#2048)
  • 70240ff3 use the latest base image
  • 97494c73 ovs: fix reaching resubmit limit in underlay (#2038)
  • f69ad381 fix: vpc and vpc nat gw not clean (#2032)
  • 791d9244 fix: install the latest version (#2036)

Contributors

  • Mengxin Liu
  • bobz965
  • changluyi
  • fanriming
  • hzma
  • lut777
  • wangyd1988
  • zhangzujian
  • 张祖建
  • 袁又袁
  • 马洪贞

v1.10.7 (2022-11-11)

  • 6c2ff6ab set release for 1.10.7
  • 0b47ca3d fix: Add support for Mellanox NIC (#1999)
  • b2cd4df1 fix pinger namespace error (#2034)
  • 7e2c3be7 increase action timeout
  • 51dbde5e prepare release for 1.10.7
  • 2cab58da fix: gateway route should stay still when node is pingable (#2011)
  • f2bdb8ea iptables: avoid duplicate logging (#2028)
  • d895b766 update np name with character prefix (#2024)
  • 3267b0f5 bump kind and node image versions (#2023)
  • 5db54e30 fix ovn nb/sb health check (#2019)
  • 0633625b fix ovs fdb for the local bridge port (#2014)
  • cf1ffcb2 do not need to delete pg when update networkpolicy (#1959)
  • 381882c2 ci: upgrade deprecated actions (#2004)
  • 071bebc6 fix: make ip deletion the same as creation (#2002)
  • 1bf5fa96 fix: delete fiprule failed at first time (#1998)
  • 9e51caaa add check of write to ovn sb db for ovn-controller (#1989)
  • ce6536a4 fix grep matching device in routes (#1986)
  • 14566316 delete pod after TerminationGracePeriodSeconds (#1984)
  • 20ed648d ovs: fix waiting flows in underlay networking (#1983)
  • 8c9232ce feature: support default vpc use nat gw pod as cust vpc (#1979)
  • e7f3fb56 ovn db: recover automatically on startup if db corruption is detected (#1980)
  • e430042f fix: modify src route priority (#1973)
  • a62e0740 fix CVE-2022-32149
  • d433f257 avoid concurrent subnet status update (#1976)
  • 9e249b34 upgrade ovs-ovn pod by generation version instead of chart version (#1960)
  • 916ae918 fix metrics name (#1977)
  • f56bb0b0 add vm pod to ipam by ip when initIPAM (#1974)
  • ffa04989 validate nbctl socket path in start-controller.sh
  • 21b4b3f8 skip CVE-2022-3358 (#1972)
  • 3f836950 use latest base image
  • 2a1074e4 fix: add default deny acl (#1935)
  • aa716033 ovs: fix mac learning in environments with hairpin enabled (#1943)
  • 77c27d4b Fix registry for ovn-central container in install.sh (#1951)
  • 1f1e3c28 ovs: add fdb update logging (#1941)
  • eeaf796d add chart version check when upgrade ovs-ovn pod
  • b0907efc fix underlay e2e testing (#1929)
  • 4a80a485 set leader flag when get leader
  • 5ef11cb4 set ovsdb-server vlog level to avoid warnings caused by ovs-vsctl (#1937)
  • 122041c1 fix: pod mistaken ls label (#1925)
  • 8996131a ignore pod without lsp when add pod to port-group
  • ee1c306a add network partition check in ovn probes
  • efa8f60d update ns annotation when subnet cidr changed (#1921)
  • 3e00aa54 fix CVE-2022-27664
  • 98f7bc08 fix EIP/SNAT on dynamic Pod annotation (#1918)
  • bcaf1e7c fix: eip and nat crd can delete even if nat gw pod deleted and ipatab… (#1917)
  • 95ebe009 fix: failed to add eip (#1898)
  • 5e06b367 ci: increase golangci-lint timeout (#1894)
  • 72a26074 fix: gatewaynode might be null (#1896)
  • 5f5e85f6 fix: api rollback
  • 63eb2551 fix: diskfull may lead to wrong raft status for ovs db (#1635)
  • 2bc4f03e kubectl-ko: turn off pipefail for ovn leader check (#1891)
  • ec0f1e4f update dpdk base image
  • 503807e3 kubectl-ko: fix trace for KubeVirt VM (#1802)
  • f961605a fix duplicate logs for leader election (#1886)
  • 88473e63 fix setting ether dst addr for dnat (#1881)
  • 704c179e refactor iptables rules (#1868)
  • 7f399adf cni should handler unmont volume, when delete pod. (#1873)
  • 3e54d9dd delete and recreate netem qos when update process (#1872)
  • e52d3476 feat: check configuration (#1832)
  • e92c85fa fix: nat gw pod should set default gw to net1 so that to access public (#1864)

Contributors

  • Kaihang Zhang
  • Mengxin Liu
  • Noah
  • bobz965
  • hzma
  • jeffy
  • long.wang
  • lut777
  • runzhliu
  • shane
  • zhangzujian
  • 张祖建
  • 马洪贞

v1.10.6 (2022-08-30)

  • 0b9f0c1f set release 1.10.6
  • 1510905c feat: reduce downtime by increasing arp cache timeout
  • 2b05fd4c feat: reduce wait time by counting the flow num.
  • e5378927 fix: missing stop_ovn_daemon args
  • 709ede03 delete log severity for drop acl when update networkpolicy
  • c1e5be72 refactor: extract external routes from eip func, make it the same as … (#1671)
  • 7bcf578e prepare release for 1.10.6
  • ed237f9b ovs: fix log file descriptor leak in monitor process (#1855)
  • e16667c3 fix ovs-ovn logging (#1848)
  • a83ec475 fix: dnat port not use whole words to check (#1854)
  • e3b41023 fix ovn dhcp not work with ovs-dpdk (#1853)
  • 237e3189 update base image
  • 05b27f2d fix: add and set ENABLE_KEEP_VM_IP=true to keep vm ip (#1702)
  • a4030de5 fix: multus macvlan ipvlan use kube-ovn ipam,but ip not inited in init-ipam (#1843)
  • 80053001 fix underlay e2e (#1828)
  • 1a3a1694 fix arping error log (#1841)
  • 9447b859 ko: fix kube-proxy check (#1842)
  • 774b8d46 base: use patch from OVN upstream (#1844)
  • 17d0f5af ci: switch environment to ubuntu-20.04 (#1838)
  • 9f0d324a 修改 ovs-ovn-dpdk 容器镜像编译打包,解决容器中 ovs 运行不正常:无法添加物理网卡,无法创建 vhostuserclient port 问题 (#1831)
  • 8c533548 windows: fix ovs/ovn versions and patches (#1830)
  • d24c5131 update centralized subnet gateway ready patch operation (#1827)
  • 02a4caf1 fix duplicate log for tunnel interface decision (#1823)
  • b25f58f5 update ovs/ovn version to fix hardware offload (#1821)
  • 842d6a34 fix: use full longest word to match full ip about dnat (#1825)
  • f12fe0ea update centralize subnet gatewayNode until gw is ready (#1814)
  • b9c591f9 initialize IPAM from IP CR with empty PodType for sts Pods (#1812)
  • e57021fc kubectl-ko: fix missing env-check (#1804)
  • 4c248112 kubectl-ko: fix destination mac (#1801)
  • c21c57d1 abort kube-ovn-controller on leader change (#1797)
  • d2939e9e avoid invalid ovn-nbctl daemon socket path (#1799)
  • aa7b9c8f update vpc-nat-gateway base
  • 7674b85f fix: warning for empty chassis fixed (#1787)

Contributors

  • bobz965
  • hzma
  • long.wang
  • lut777
  • zhangzujian
  • 张祖建

v1.10.5 (2022-08-10)

  • 88531d50 set release v1.10.5
  • 97031bdd prepare for release v1.10.5
  • 4a34c5dd delete htb qos when releated annotation is deleted (#1788)
  • 66643ba3 perf: fix memory leak
  • 84aba41f perf: disable mlockall to reduce memory usage
  • 35533738 fix iptables for services with external traffic policy set to Local (#1773)
  • 32ee00b6 perf: reduce metrics labels (#1784)
  • 93e74c60 northd: remove lookup_arp_ip actions (#1780)
  • 6c7f45ef fix install error
  • 86173506 fix:can not delete pod with sriov vf (#1654)
  • dc77ceb3 dpdk-v2 ,--with-hybrid-dpdk 修改 Dockerfile.base-dpdk 解决 编译安装 ovs-dpdk 正常运行 (#1754)
  • 7a1795e6 dpdk-v2 ,--with-hybrid-dpdk qemu 创建 sock 权限问题 (#1739)
  • 0541ce98 feature: support exchange link names of OVS bridge and provider nic in underlay networks (#1736)
  • 4617d7f7 support kubernetes v1.24 (#1761)
  • 29f3d6ed use leases for leader election (#1529)
  • f02df1a8 fix iptables for service traffic when external traffic policy set to local (#1728)
  • 7f256965 set sysctl variables on cni server startup (#1758)
  • 47e39fbf fix: add omitempty to subnet spec
  • c9ac0cdf perf: replace jemalloc to reduce memory usage
  • 7ffa99e3 avoid patch interface deletion & recreation during restart (#1741)
  • 8fa4ca49 only support IPv4 snat in vpc-nat-gw when internal subnet is dual (#1747)
  • a46b36d9 enqueue subnets after vpc update (#1722)
  • 1bf5dc44 do not add subnet not processed by kube-ovn to vpc (#1735)
  • 66d8be9f dpdk-v2 ,--with-hybrid-dpdk qemu 创建 sock 权限问题 (#1739)
  • e9c27c60 fix: If pod has snat or eip, also need delete staticRoute when delete pod. (#1731)
  • 7841f082 optimize lrp create for subnet in vpc (#1712)
  • 994885c8 fix: cancel delete staticroute when it's used by NatRule (#1733)
  • f9a84588 fix: wrong info when update subnet from dual to ipv4 or ipv6. (#1726)
  • 77988f21 fix overlay MTU in vxlan/stt tunnels (#1693)

Contributors

  • Mengxin Liu
  • hzma
  • long.wang
  • xujunjie-cover
  • zhouhui-Corigine
  • 张祖建

v1.10.4 (2022-07-18)

  • 1e4a1959 set release 1.10.4
  • 0bbcb389 prepare for release 1.10.4
  • fb76c58e fix: response has no gw when create nic without default route (#1703)
  • 55b3d508 ignore ovsdb-server/compact error: not storing a duplicate snapshot
  • b6084777 Get latest vpc data from apiserver instead of cache (#1684)
  • f447a1d5 update priority range in htb qos (#1688)
  • bdfdc178 fix: clean vip eip snat dant fip in cleanup.sh (#1690)
  • 460f930c add upgrade-ovs script (#1681)

Contributors

  • Mengxin Liu
  • Wang Bo
  • bobz965
  • hzma
  • xujunjie-cover
  • zhangzujian

v1.10.3 (2022-07-13)

  • f24ed686 set release 1.10.3
  • 02d68f7f prepare for release 1.10.3
  • 2c989340 fix: change ovn-ic static route to policy (#1670)
  • 1596c9ef fix: Do not Recreate Logical_Router_Port when Vpc recreated (#1570)
  • db4f5ad0 Delete pod if subnet of the pod's owner(sts/vm) updated (#1678)
  • c41897a0 do not snat packets only for subnets with distributed gateway when external traffic policy is set to local (#1616)
  • 8190df3b security: disable pprof by default (#1672)
  • 761ddcbc bgp: consolidate service check and use service const (#1674)
  • 5cffa97d fix bgp: sync service cache (#1673)
  • 874785bf fix iptables for direct routing (#1578)
  • f3886af7 fix libovsdb (#1664)
  • 662dfa64 mount modules for auto load ip6tables moudles (#1665)
  • 1efaeb00 ignore pod not scheduled when reconcile subnet (#1666)
  • 4409f6c9 fix ovs-ovn not running on newly added nodes (#1661)
  • b5025a6a fix get security group name by external_ids (#1663)
  • 4afbaf31 add policy route when add subnet (#1655)

Contributors

  • Mengxin Liu
  • Money Liu
  • Wang Bo
  • gugu
  • hzma
  • lut777
  • wangyd1988
  • 刘睿华
  • 张祖建

v1.10.2 (2022-06-28)

  • b1a17c4a set for release 1.10.2
  • 4d229555 fix: no need routed when use v1.multus-cni.io/default-network (#1652)
  • 40391a03 prepare for release 1.10.2
  • 7c4dfe72 fix: subnet failed when create without protocol
  • 4b063242 set ether dst addr for dnat on logical switch (#1512)
  • 20222e4f CI: delete resources in order to avoid a long time waiting for subnet deletions. (#1643)
  • 35e29e16 ci: fix golangci-lint (#1639)
  • 4661b76e fix: cleanup should ignore patch failed (#1626)
  • 73a53ba7 fix no interface report to multus cni, missing in k8s.v1.cni.cncf.io/network[s]-status (#1636)
  • fe5e020e Update install.sh (#1645)
  • bd7ff533 set networkpolicy log default to false (#1633)
  • 83c9e845 update policy route when join subnet cidr changed (#1638)
  • bcf057d1 ci: update trivy options (#1637)
  • f93a5273 increase initial delay of ovs-ovn liveness probe (#1634)
  • 1a55ce12 wait ovn-central pods running before delete ovs-ovn pods (#1627)
  • f8a266d6 get dbstatus for all ovn-central pod (#1619)
  • bc838d5a delete "allow" policy route on subnet deletion (#1628)

Contributors

  • Mengxin Liu
  • ShaPoHun
  • halfcrazy
  • hzma
  • xujunjie-cover
  • zhangzujian
  • 张祖建

v1.10.1 (2022-06-19)

  • 4935fa6a monitor dns in cilium e2e (#1597)
  • 3dc29041 prepare for release 1.10.1
  • e459688e ci: build amd64 images without avx512 (#1584)
  • d7144681 update ovs health check, delete connection to ovn sb db (#1588)
  • cfbe55e0 fix: all cluster pod will be in podadd queue (#1587)
  • 08ba4215 fix pod could not be ready (#1562)
  • c453b7ac fix: delete pod panic when delete vm or statefulset. (#1565)
  • 77044e3d fix: clean CRDs introduced by new vpc-nat-gateway (#1563)
  • e35f90f1 do not gc vm pod lsp when vm still exists (#1558)
  • adabd853 do not delete static routes on controller startup (#1560)
  • 4348e58f replace ovn-nbctl daemon with libovsdb in frequent operations (#1544)
  • 4cacb4b9 fix exec cmd in vpc nat gateway (#1556)
  • 0ed681af CNI: do not return route if nic is not eth0 (#1555)
  • 96f232d4 do not nat packets for incoming traffic when service externalTrafficPolicy is Local
  • bbb8a697 exit kube-ovn-controller on stopped leading (#1536)
  • 4b0bd69e tmp cancel cilium external svc test (#1531)

Contributors

  • hzma
  • lut777
  • xujunjie-cover
  • zhangzujian
  • 刘睿华
  • 张祖建

v1.10.0 (2022-05-15)

  • 16d28f75 release 1.10.0
  • bcdb3388 use inc-engine/recompute instead of deprecated recompute (#1528)
  • 12094766 update kind to v0.13.0 (#1530)
  • 673138f2 move dumb-init from base images to kube-ovn image (#1527)
  • ad6826d9 fix installing dumb-init in arm64 image (#1525)
  • 4eebabc1 optimize ovs request in cni (#1518)
  • 7a3f73d5 optimize node port-group check (#1514)
  • b7c01d43 logic optimization (#1521)
  • 65ee71b4 fix defunct ovn-nbctl daemon (#1523)
  • ebe00370 fix arm image (#1524)
  • 354d6c3e fix: keep vm's and statefulset's ips when user specified subnet (#1520)
  • 6021e528 feature: add doc for tunning packages (#1513)
  • 8e72f2e1 add document for windows support (#1515)
  • d7ef43b3 reduce ovs-ovn restart downtime (#1516)
  • 7b8aa124 finish basic windows support (#1463)
  • ecc8268f refactor logical router routes (#1500)
  • 51603624 add netem qos when create pod (#1510)
  • 5158dd9d handle the case of error node cidr (#1509)
  • 1285b039 fix: ovs trace flow always ends with controller action (#1508)
  • 69428690 add qos e2e test (#1505)
  • f214ee20 optimize IPAM initialization (#1498)
  • 367d6b74 test: fix flaky test (#1506)
  • 79ad4fcf docs: update README.md
  • 85d09ccd synchronize yamls with installation script (#1504)
  • 63dc5219 feature: svc of multiple clusters (#1491)
  • 011eacf6 use OVS branch-2.17 (#1495)
  • afc9ef62 Update USERS.md (#1496)
  • b057404b update document for mellanox hardware offload (#1494)
  • fb3c3e6e Feature iptables eip nats splits (#1437)
  • 0c95402e Update USERS.md (#1493)
  • 08a7d5b6 update github actions (#1489)
  • ad28dca0 update USER.md (#1492)
  • 0db63226 fix: add empty chassis check in ovn db (#1484)
  • d631f8f8 feat: lsp forwarding external Layer-2 packets (#1487)
  • d4d700ec base: add back kubectl (#1485)
  • 59e4ae73 delete ipam record when gc lsp (#1483)
  • 73405b2a fix: wrong vpc-nat-gateway arm image (#1482)
  • 881622d4 fix pod annotation may override by patch (#1480)
  • e772ee95 add acl doc (#1476)
  • 6ef72e75 fix: workqueue_depth should show count not rate (#1478)
  • 5ba5c526 add delete ovs pods after restore nb db (#1474)
  • 73f9d15f delete monitor noexecute toleration (#1473)
  • abaebea4 add env-check (#1464)
  • 1d6d4653 Support kubevirt vm live migrate for pod static ip (#1468)
  • 54cab3aa fix routes for packets from Pods to other nodes
  • ba8c5937 add manual compile method for ubuntu20.04 (#1461)
  • 7848d71f append metrics (#1465)
  • 4f0b1976 Annotation network_type always is geneve
  • 6ddba02a masquerade packets from Pods to service IP
  • 3d18b8d3 update OVS and OVN for windows
  • 39cdfc5c windows support for cni server
  • 75d8f4de add kube-ovn-controller switch for EIP and SNAT
  • 8ac3e0c0 docs: add USERS.md (#1454)
  • 8c214bc9 update topology pic
  • cd5c591c feature: add sb/nb db check bash script (#1441)
  • fc5f7190 add routed check in circulation (#1446)
  • aa756519 modify init ipam by ip crd only for sts pod (#1448)
  • 3a5ead6d base: refactor ovn/ovs build (#1444)
  • 43051166 log: show the reason if get gw node failed (#1443)
  • 8f1e85ae add doc for #1358 (#1440)
  • 0c0a0308 prepare windows support for cni server
  • 88b07498 modify webhook img to independent image (#1442)
  • 3dbfa4de update alpine to fix CVE-2022-1271
  • 03af744f fix adding key to delete Pod queue
  • 0ea24dcf fix IPAM initialization
  • b26a06e7 temporary cancel the external2cluater e2e test for cilium (#1428)
  • 94bc2087 ignore all link local unicast addresses/routes
  • 9be57346 fix error handling for netlink.AddrDel
  • 87164cc9 replace pod name when create ip crd (#1425)
  • e7c69ba5 add webhook vaildate the vpc resource whether can be deleted. (#1423)
  • c9a58886 We are looking forward to your PR! (#1422)
  • 743ce241 support alloc static ip from any subnet after ns supports multi subnets (#1417)
  • d3f6431f fix provider-networks status
  • 48e0c4ed build ovs/ovn for windows in ci
  • 3b4ac99a cilium e2e: deploy k8s without kube-proxy
  • 902315ed windows support for CNI
  • f2baa2f7 add simple e2e for multus integration
  • e3693436 update e2e testing
  • 60bf81a3 recover ips CR on IPAM initialization
  • 8e1cd468 docs: update ROADMAP.md and MAINTAINERS
  • 19ecaeee create ip crd in kube-ovn-controller (#1413)
  • 25abbce7 add condition for triggering the deletion of redundant chassises in sbdb (#1411)
  • a378fad2 fix: do not recreate port for terminating pods (#1409)
  • 9587ad41 update cni version to 1.0
  • df83c5fb update underlay environment requirements
  • ff695aa3 avoid frequent ipset update
  • f475736c add reset for kube-ovn-monitor metrics (#1403)
  • 87d6839d fix: The underlay physical gateway config by external-gw-addr when use snat&eip (#1400)
  • d36a0d8d add custom acls for subnet (#1395)
  • 3206a7a2 check the cidr format whether is correct (#1396)
  • a33d519b optimize docs due to frequently asked question. (#1393)
  • 7bd25c63 adding IP Protocol enumeration to CRD can reduce the kube-ovn Controller judgment logic (#1391)
  • dcc7971a change the wechat qcode
  • 677690d5 append vm deletion check (#1390)
  • 0d663ebe We should handle the case where the subnet protocol is handled (#1373)
  • 7289e87c VIP is decoupled from port security (#1389)
  • 12907270 chore: reduce image size (#1388)
  • 5e108fe8 docs: update the maintainer and roadmap (#1387)
  • fe7cbe1b ci: update kind and k8s
  • ea60cdf7 fix external egress gateway
  • 22cb15c5 add missing link scope routes in vpc-nat-gateway
  • 5571619d update nodeips for restore cmd in ko plugin
  • 33180a1c increase memory limit of ovn-central
  • aa24894e fix range loop
  • 1f24d64d fix probe error
  • c621853a update script to add restore plugin cmd
  • dd4a5e0d support dpdk (#1317)
  • 8ad9e838 Use camel case instead of snake case
  • 9f3426ee add detail error when failed to create resource
  • 44dae1f7 add restore process for ovn nb db
  • c4bb2454 add reset porocess for ovs interface metrics
  • 8e8da195 fix SNAT/PR on Pod startup
  • e9a4bd5c optimize kube-ovn-monitor yaml
  • b11ffa31 Update subnet.go
  • 0b43fc80 feat: add webhook to check subnet deletion.
  • 21837784 modify ipam v6 release ip problem
  • 1264684c skip ping gateway for pods during live migration
  • 0da84f83 don't check conflict for migration pod with only static mac
  • 89aa2413 add service cidr when init kubeadm
  • bfcb0331 docs: add provide and ns spec for multus crd
  • 4f987b10 update flag parse in webhook
  • 7354d0c3 fix usage of ovn commands
  • ffd5c844 add check for pod update process
  • fe7a6e03 log: rotate all logs in kube-ovn-cni and add compress
  • 024d1684 keep ip for kubevirt pod
  • 8c0b358d docs: add integration with Corigine OVS offload
  • 07c53120 fix OVS bridge with bond port in mode 6
  • baeb3af4 fix: continue of deletion for del pod failed when can't found vpc or subnet (#1335)
  • 8e204be4 feat: support DHCP
  • 8393f322 Fix usage of ovn commands
  • bb7b5e56 resync provider network status periodically
  • 62642ea8 Revert "resync provider network status periodically"
  • 6ba89e8c use const instead the string
  • d8ba8d03 when update gateway info, we should append old to new deploy
  • cc124556 resync provider network status periodically
  • c53b28b1 fix underlay subnet in custom VPC
  • c4a807b1 fix ips update
  • 3269bad9 kube-ovn CNI配置文件名字可配置 (#1318)
  • 491abaa8 delete the logic of repeated enqueueing
  • 31c0b075 add log to file, update upgrade script
  • 61c5ebb8 Temporarily comment out the compile and upload of the centos8 compile container.
  • aef6595f Revert "Temporarily comment out the compile and upload of the centos8 compile…"
  • 79a26873 Temporarily comment out the compile and upload of the centos8 compile container.
  • 1fd27d7c feat: add webhook for subnet update validation
  • 6ab8e369 optimized decision logic
  • af0baa0c Use camel case instead of snake case
  • b6764e0b append add cidr and excludeIps annotation for namespace
  • a34bb353 feat: vpc peering connection
  • 9c5556c8 Remove excess code
  • 273eb844 chore: show install options when installing (#1293)
  • d5e342c0 feat: update provider network via node annotation
  • e9c9b1ce add container compile and insmod
  • a90b06a8 add policy route for centralized subnet
  • 2a39f793 fix: replace ecmp dp_hash with hash by src_ip (#1289)
  • 0fd564e4 Use go to rerimplement ovn-is-leader.sh (#1243)
  • 432c4070 fix: only log matched svc with np (#1287)
  • cb1a698a feat: Replace command health check with k8s tcpSocket check (#1251)
  • b220f0c6 add 'virtual' port for vip (#1278)
  • 36c43c48 skip the missing of kube-dns (#1286)
  • dad0ef62 fix: check if taint exists before un-taint
  • 9365a62d add policy route for distributed subnet in default vpc
  • a5ca73c8 ci: add retry to fix flaky test
  • 4fdca714 set up tunnel correctly in hybrid mode
  • 7f8f322b check static route conflict
  • e7bf87b8 fix: kubeovn#1271 (comment)
  • 017e5125 transfer IP/route earlier in OVS startup
  • ee2ccf1b delete unused constant
  • 4022bd57 add metric for ovn nb/sb db status
  • fdcc833a add gateway check after update subnet
  • f40e26ad we should first see if a condition is not going to be met
  • 3ae628cb add judge before use slices index
  • 47625c52 prevent multiple namespace reconcile
  • 4455c869 prevent multiple namespace reconcile
  • 6b60a587 fix: validate statefulset pod by name
  • fa02cb21 fix golang and base image versions
  • f210b934 add back centralized subnet active-standby mode
  • 2557c516 support to add multiple subnets for a namespace
  • c230ed8a prepare for next release
  • f95a90eb Support only configure static mac_address

Contributors

  • Cookie Wang
  • Fudankenshin
  • Mengxin Liu
  • Samuel Liu
  • amoy-xuhao
  • bob199x
  • bobz965
  • caohuilong
  • chestack
  • fanriming
  • gongysh2004
  • hackeren
  • halfcrazy
  • hzma
  • jyjiangkai
  • long.wang
  • lut777
  • pengbinbin1
  • wang_yudong
  • wangyd1988
  • xujunjie
  • xujunjie-cover
  • yi.luo
  • zhangzujian
  • 尚墨
  • 张祖建
  • 罗云鹤
  • 范日明

v1.9.30 (2023-10-08)

  • 1e5d80ca ovs: load kernel module ip_tables only when it exists (#3281)
  • 5cc81da2 pinger: increase packet send interval (#3259)
  • 3ba526b1 prepare for the next release

Contributors

  • 张祖建

v1.9.29 (2023-09-11)

  • b925c737 add multicast snoop for release-1.9 (#3192)
  • b2781c66 underlay: fix ip/route tranfer when the nic is managed by NetworkManager (#3184)
  • 325464ec chart: fix ovs-ovn upgrade (#3164)
  • 2abd478d subnet: fix deleting lr policy on node deletion (#3178)
  • b9b8c780 delete append externalIds process in initIPAM (#3134)
  • ca061d53 move unnecessary init process after startWorkers (#3124)
  • a8e68137 delete append externalIds process in initIPAM (#3134)
  • 098ae5a7 prepare for the next release

Contributors

  • changluyi
  • hzma
  • 张祖建
  • 马洪贞

v1.9.28 (2023-08-04)

  • b01d68e1 update version to v1.9.28
  • 7dcfd171 fix u2o policy route generate too many flow tables cause oom
  • ca4b6c3e distinguish nat ip for central subnet with ecmp and active-standby (#3100)
  • a91f0a08 fix .status.default when initializing the default vpc (#3086)
  • fabbd4b8 ci: do not pin go version (#3073)
  • a280123f ci: fix multus installation (#3062)
  • 2cdf8fe4 Revert "prepare for release 1.9.28"
  • f347bcd0 set genev_sys_6081 tx checksum off (#3045)
  • 77eb5694 prepare for release 1.9.28
  • 25160ba1 static ip in exclude-ips can be allocated normally when subnet's availableIPs is 0 #3031
  • 96613529 ci: pin go version to 1.20.5 (#3034)
  • 990d4a7c pinger: use fully qualified domain name (#3032)
  • 11ce268e uninstall.sh: fix ipset name (#3028)
  • 66d0e439 fix subnet finalizer (#3004)
  • 1c9fc6af kubectl ko performance enhance (#2975) (#2992)
  • 5292a08c underlay: fix NetworkManager syncer for virtual interfaces (#2988)
  • 74c652ee underlay: does not set a device managed to no if it has VLAN managed by NM (#2986)

Contributors

  • changluyi
  • hzma
  • 张祖建
  • 马洪贞

v1.9.27 (2023-06-20)

  • 48187e49 release 1.9.27
  • c41a03a8 add detail comment
  • dfe43f9d prepare for next release
  • b11c36e3 Kubectl ko diagnose perf release 1.9 (#2964)
  • 5995cce9 underlay: sync NetworkManager IP config to OVS bridge (#2949)
  • 2dc68307 typo (#2952)
  • 265392c4 Revert "nm not managed only in the change provide nic name case (#2754)" (#2944)
  • 6d87274e kubectl ko perf on release-1.9 (#2947)
  • 110440f5 u2o support specify u2o ip on release-1.9 (#2935)
  • 5c855cd6 support tos inherit from inner packet
  • e5a13566 underlay: do not delete patch ports created by ovn-controller (#2851)
  • 5bb5f45e kubectl-ko: fix trace when u2oInterconnection is enabled (#2836)
  • e45a2978 fix underlay access to node through ovn0 (#2847)
  • 7e32e57d fix MTU when subnet is using logical gateway (#2834)
  • a5a97ce6 prepare for v1.9.26
  • bce5b04d fix ip statistics in subnet status (#2769)
  • 6b4786b3 add EXCHANGE_LINK_NAME to installation script
  • 2dd1bee1 cni-server: wait ovs-vswitchd to be running (#2759)
  • 8c158d72 ci: run kube-ovn e2e for underlay (#2762)
  • 5eef52ac nm not managed only in the change provide nic name case (#2754)
  • 635c57b6 update policy route when change from ecmp to active-standby (#2716)
  • af16c760 fix ovn lb gc (#2728)
  • 4a4397c7 fix recover db failed using offical doc (#2721)
  • 786ec739 bump base image
  • 9fe73bd2 base: remove patch for fixing ofpbuf memory leak (#2715)
  • 42da9ddd cni-server: do not perform ipv4 conflict detection during VM live migration (#2693)
  • e67cfd4c ovn-controller: do not send GARP on localnet for Kube-OVN ports (#2690)
  • a4cae607 netpol: fix packet drop casued by incorrect address set deletion (#2677)
  • 96580be3 fix pg set port fail when lsp is already deleted
  • 905b541d add subnetstatus lock for handleAddOrUpdateSubnet (#2668)
  • abed4718 prepare for next release
  • b670e1c1 broadcast free arp when pod setup (#2643)
  • 1c9e8eac delete sync user (#2629)
  • da11ccdc prepare for next release
  • c99d9dda ci: deploy multus in thick mode (#2628)
  • c8f55f9d libovsdb: use monitor_cond as the monitor method (#2627)
  • 9f2e29e1 ovs: fix dpif-netlink ofpbuf memory leak (#2620)
  • bd6f1bb2 add debug image
  • c3438b48 ci: fix multus installation (#2604)
  • e77adbba cut invalid OVN_NB_DAEMON to make log more readable (#2601)
  • e54d9904 unittest: fix length assertion (#2597)
  • f731350d bump base image
  • b95b3395 ci: bump actions/upload-artifact to v3
  • dd087cbf security: clear .trivyignore
  • f44ec54d underlay: get address/route before setting nm managed to no (#2592)
  • 250f3403 ci: bump kind image to v1.26.3 (#2581)

Contributors

  • bobz965
  • changluyi
  • hzma
  • yichanglu
  • zhangzujian
  • 张祖建

v1.9.23 (2023-03-29)

  • d698c73d move ipam.subnet.mutex to caller (#2571)
  • b366ee82 fix: memory leak in IPAM caused by leftover map keys (#2566)
  • 1cea97b9 fix ovn-bridge-mappings deletion (#2564)
  • 4f45cdd9 fix go mod list (#2556)
  • e85e1ff9 do not set device unmanaged if NetworkManager is not running (#2549)
  • 8473f27e underlay: fix network manager operation (#2546)
  • 0b0091c4 controller: fix apiserver connection timeout on startup (#2545)
  • ec81877b underlay: delete altname after renaming the link (#2539)
  • 8f5c8088 underlay: fix link name exchange (#2516)
  • 90dcd008 change version to v1.9.23
  • 648c3c9f fix changging the stopped vm's subnets, the vm cann't start normally (#2463)
  • 7df47d7d add kubevirt multus nic lsp before gc process (#2504)
  • c8917969 update for release v1.9.22

Contributors

  • hzma
  • zhangzujian
  • 张祖建
  • 袁又袁
  • 马洪贞

v1.9.22 (2023-03-16)

  • 439e47f8 ensure address label is correct before deleting it (#2487)
  • 0f567b44 add node to addNodeQueue if required annations are missing (#2481)
  • db313ad1 remove unused subnet status fields (#2482)
  • 183e34ff prepare for release v1.9.22
  • bfa779dc fix ips CR not found due to etcd error (#2472)
  • e06f2b29 ci: fix ovn-ic installation (#2456)
  • 694059cc do not set subnet's vlan empty on failure (#2445)
  • 00134846 set release v1.9.21
  • a1f6a3d3 prepare for release v1.9.21
  • 2861d079 fix: missing import netlink
  • f1779eec release-1.9 cni version update from v0.9.1 => v1.2.0 (#2434)
  • 51105207 fix ovn-speaker router bug (#2433)
  • 4cec68c5 fix chart install/upgrade e2e (#2426)
  • f2c55a54 ci: fix cilium chaining e2e (#2391)
  • 8790b3cc Fix routeregexp ipv6 (#2395)
  • dc205246 ci: fix ref name check (#2390)
  • 6ce0d02a bump base image
  • 551a7140 ovs: fix re-creation of tunnel backing interfaces on restart.
  • 0b7e72f8 ci: skip netpol e2e automatically for push events (#2379)
  • d2dfd104 e2e: run specs in parallel (#2375)

Contributors

  • Daviddcc
  • KillMaster9
  • changluyi
  • zhangzujian
  • 张祖建

v1.9.20 (2023-02-22)

  • d3296661 fix CVE-2022-41723
  • 2a9d7004 ci: fix default branch test (#2369)
  • 25c19072 fix github actions workflows (#2363)
  • 0264ddc1 simplify github actions workflows (#2338)
  • 43b70761 use existing node switch cidr instead of the configured one (#2359)
  • 5d3faaa9 prepare for 1.9.20
  • 36c3d87f do not remove link local route on ovn0 (#2341)
  • cee5bb7f fix encap ip when the tunnel interface has multiple addresses (#2340)
  • 7c46ed2f enqueue endpoint when handling service add event (#2337)
  • 2f76a0fa fix getting service backends in dual-stack clusters (#2323)
  • 9b7960dd fix github actions workflow
  • 85fb4197 fix u2o code err
  • b9d58b42 fix kube-ovn-controller crash on startup (#2305)
  • a1e8e40a fix gosec ci installation (#2295)
  • 3ab57164 ovn northd: fix connection inactivity probe (#2286)
  • 1ab8b9e9 fix ct new config error
  • 63dc62a9 fix network break on kube-ovn-cni startup (#2272)
  • 4a8997b9 fix gosec installation
  • 5a234e02 bump base image version
  • 6427688b ovn db: add support for listening on pod ip (#2235)
  • 875bcd46 add enable-metrics arg to disable metrics (#2232)

Contributors

  • changluyi
  • hzma
  • zhangzujian
  • 张祖建

v1.9.19 (2023-01-09)

  • 3aa2e78b update install.sh
  • 22e35941 prepare release v1.9.19
  • d48dd365 u2o feature merge to 1.9 (#2226)
  • 2788d8e3 add release-1.8/1.9/1.10 to scheduled e2e (#2224)
  • 45d1c158 cni-server: fix waiting for routed annotation (#2225)
  • 938bd680 feature: detect ipv4 address conflict in underlay (#2208)
  • 82a7a51d fix git ref name in e2e
  • 3a7adc9a release-1.9: refactor e2e (#2210)

Contributors

  • changluyi
  • zhangzujian
  • 张祖建

v1.9.18 (2023-01-03)

  • 015c427b ci: add publish action
  • cd763391 add netem qos when create pod (#1510)
  • 2dcc95ca ovn nb and sb can't bind lan ip in ssl merge to 1.9 (#2201)
  • 25281a9f ci: load image to kind for helm install
  • 0f3569ca prepare for release v1.9.18
  • 39bed325 local ip bind to service merge to release 1.9 (#2197)
  • 9ec4b1e7 fix: change condition to conditions
  • c69685cd fix: ovs gc just for pod if (#2187)
  • 799c824d update docs link in install.sh (#2196)
  • ec852551 Release 1.9 (#2181)
  • 28c5e0ce ignore conflict check for pod ip crd (#2188)

Contributors

  • Mengxin Liu
  • changluyi
  • hzma
  • lut777
  • tonyleu
  • 马洪贞

v1.9.17 (2022-12-14)

  • 4c93a29f An error occurred when netpol was added in double-stack mode (#2160)
  • f5b65e3e add process for delete networkpolicy start with number (#2157)
  • 37af103c prepare for release 1.9.17
  • 6c32c3c8 security: remove private key file
  • 0338f7e8 security: fix security issues
  • 51828313 update version to v1.9.16 in install.sh
  • abaa37bf add check for subnet cidr (#2153)
  • b2f78e9a delete nc cmd in image (#2148)
  • d2b5b7c3 some optimization for provider network status update (#2135)
  • d8d4e913 kind: support to specify api server address/port (#2134)
  • 096c82f0 fix: sometimes alloc ipv6 address failed sometimes ipam.GetStaticAddress return NoAvailableAddress
  • a15504c3 optimize provider network (#2099)
  • 410c8af5 Revert "optimize provider network (#2099)"
  • 602901a2 optimize provider network (#2099)

Contributors

  • Mengxin Liu
  • changluyi
  • fanriming
  • hzma
  • wangyd1988
  • zhangzujian
  • 张祖建
  • 马洪贞

v1.9.16 (2022-12-05)

  • 0ea8c26a prepare for release 1.9.16
  • aac811b5 fix policy route for subnets with logical gateway (#2108)
  • ba632d66 fix lint
  • 2319d1ee replace klog.Fatalf with klog.ErrorS and klog.FlushAndExit (#2093)

Contributors

  • zhangzujian
  • 张祖建

v1.9.15 (2022-11-29)

  • 989af9f3 prepare for release v1.9.15
  • 1343a908 fix: del createIPS (#2087)
  • 524b6d3f check if externalIds map is nil when add node as gw for centralized subnet (#2088)
  • 6a392dfa fix ovs bridge not deleted cause by port link not found (#2084)
  • 14c9840f fix gosec error
  • 1ce4713e bump go version to 1.18
  • c52c9f3b fix libovsdb issues (#2070)
  • c97b1f1d refactor: add unknown config to lsp (#2076)
  • d1bd047b fix: replace replace with add to override existing route (#2061)
  • 06d22315 fix OVN LS/LB gc (#2069)
  • 3200e272 update ipv6 address for vpc peer (#2060)
  • f9024540 perf: reduce controller init time (#2054)
  • 7ca28c9d pass klog verbosity to libovsdb (#2048)
  • 6872bfd2 use the latest base image
  • bcd42d2a ovs: fix reaching resubmit limit in underlay (#2038)
  • b45ee71f fix: vpc and vpc nat gw not clean (#2032)

Contributors

  • Mengxin Liu
  • bobz965
  • changluyi
  • hzma
  • lut777
  • zhangzujian
  • 张祖建

v1.9.14 (2022-11-11)

  • 9581d06b set release for 1.9.14
  • 6ba9954f fix pinger namespace error (#2034)
  • 0c9fd3f0 prepare release for 1.9.14
  • 9cbb07a6 fix: gateway route should stay still when node is pingable (#2011)
  • ab2a1f12 update np name with character prefix (#2024)
  • ec4fe022 bump kind and node image versions (#2023)
  • 5f9dca93 fix ovn nb/sb health check (#2019)
  • d7e78b8a fix ovs fdb for the local bridge port (#2014)
  • d41c467a do not need to delete pg when update networkpolicy (#1959)
  • 52310595 add helm and e2e test (#1992)
  • 85b8dd66 add check of write to ovn sb db for ovn-controller (#1989)

Contributors

  • Noah
  • hzma
  • lut777
  • zhangzujian
  • 张祖建

v1.9.13 (2022-10-26)

  • 354d6217 update ovs version to branch-2.16 (#1988)
  • 574f31fd fix grep matching device in routes (#1986)
  • 8fa0fa34 delete pod after TerminationGracePeriodSeconds (#1984)
  • 1f7b58d4 ovs: fix waiting flows in underlay networking (#1983)
  • 2506a4df use latest base image
  • 1c6ea035 ovn db: recover automatically on startup if db corruption is detected (#1980)
  • d7aabe2c prepare for release 1.9.13
  • adda63c0 fix CVE-2022-32149
  • 6ffaa44f avoid concurrent subnet status update (#1976)
  • f0754587 upgrade ovs-ovn pod by generation version instead of chart version (#1960)
  • 78d9cfd3 fix metrics name (#1977)
  • 1aaa6e48 add vm pod to ipam by ip when initIPAM (#1974)
  • d7ac1503 validate nbctl socket path in start-controller.sh
  • e6adb1e1 skip CVE-2022-3358 (#1972)
  • b4fe883c use latest base image
  • b3a1cf65 fix: add default deny acl (#1935)
  • 903eff03 ovs: fix mac learning in environments with hairpin enabled (#1943)
  • aa50a2ef Fix registry for ovn-central container in install.sh (#1951)
  • e9a1af07 ovs: add fdb update logging (#1941)

Contributors

  • Mengxin Liu
  • hzma
  • lut777
  • runzhliu
  • zhangzujian
  • 张祖建
  • 马洪贞

v1.9.12 (2022-09-29)

  • 42c2a82c add chart version check when upgrade ovs-ovn pod
  • 04338c84 fix underlay e2e testing (#1929)
  • 6c710acb prepare for release v1.9.12
  • 4f2f4058 set leader flag when get leader
  • 495e1632 set ovsdb-server vlog level to avoid warnings caused by ovs-vsctl (#1937)
  • 5f23adc6 use leases for leader election (#1529)

Contributors

  • 张祖建
  • 马洪贞

v1.9.11 (2022-09-21)

  • 44cee1df prepare release 1.9.11
  • 07819218 fix: pod mistaken ls label (#1925)
  • ff176b89 ignore pod without lsp when add pod to port-group
  • 6df23c2b add network partition check in ovn probes
  • 270e9dc3 feat: Replace command health check with k8s tcpSocket check (#1251)
  • 64c41a5d fix CVE-2022-27664
  • ed8ba4c6 update ns annotation when subnet cidr changed (#1921)

Contributors

  • hzma
  • lut777
  • zhangzujian
  • 尚墨
  • 马洪贞

v1.9.10 (2022-09-13)

  • f7a62ca7 set release 1.9.10
  • f9f49266 prepare for release 1.9.10
  • 455863a0 fix: gatewaynode might be null (#1896)
  • 23756538 fix: api rollback
  • 0522d9eb fix: diskfull may lead to wrong raft status for ovs db (#1635)
  • 23def0a2 kubectl-ko: turn off pipefail for ovn leader check (#1891)
  • 451c88ab fix logrotate issues
  • a98cffa4 fix security issues
  • 493b42de security: conform to gosec G114 (#1860)
  • ceb3855e fix duplicate logs for leader election (#1886)
  • 7ae439b0 delete and recreate netem qos when update process (#1872)

Contributors

  • Mengxin Liu
  • hzma
  • lut777
  • zhangzujian
  • 尚墨
  • 张祖建

v1.9.9 (2022-08-30)

  • c4701fd2 set release 1.9.9
  • 33d027af feat: reduce downtime by increasing arp cache timeout
  • b90769f3 feat: reduce wait time by counting the flow num.
  • 2afbe408 fix: missing stop_ovn_daemon args
  • 37b9f2f8 delete log severity for drop acl when update networkpolicy
  • 82026bbd base: use patch from OVN upstream (#1844)
  • f9a2d8de prepare release for 1.9.9
  • 7138087c ovs: fix log file descriptor leak in monitor process (#1855)
  • c6f9565c fix ovs-ovn logging (#1848)
  • b3a6998e fix: add and set ENABLE_KEEP_VM_IP=true to keep vm ip (#1702)
  • 20ed2329 fix: multus macvlan ipvlan use kube-ovn ipam,but ip not inited in init-ipam (#1843)
  • 4c40a20d fix underlay e2e (#1828)
  • eb1706bc fix arping error log (#1841)
  • 5757b8ec ko: fix kube-proxy check (#1842)
  • 2000e996 ci: switch environment to ubuntu-20.04 (#1838)
  • 919bb236 update centralized subnet gateway ready patch operation (#1827)
  • 1c3b622c fix duplicate log for tunnel interface decision (#1823)
  • e4d53217 update centralize subnet gatewayNode until gw is ready (#1814)
  • d44de3e0 initialize IPAM from IP CR with empty PodType for sts Pods (#1812)
  • 3eb1d1ad kubectl-ko: fix missing env-check (#1804)
  • 5613b63c kubectl-ko: fix destination mac (#1801)
  • 1284f15d abort kube-ovn-controller on leader change (#1797)
  • 5bf8de0f avoid invalid ovn-nbctl daemon socket path (#1799)
  • 4680e632 update vpc-nat-gateway base
  • 4cce7870 fix: warning for empty chassis fixed (#1786)

Contributors

  • Mengxin Liu
  • bobz965
  • hzma
  • lut777
  • zhangzujian
  • 张祖建

v1.9.8 (2022-08-10)

  • 686d913c set release v1.9.8
  • 8de35693 prepare for release v1.9.8
  • 38ee8301 delete htb qos when releated annotation is deleted (#1788)
  • 85bd5f94 perf: fix memory leak
  • 46c970d6 perf: disable mlockall to reduce memory usage
  • d7fd3793 perf: reduce metrics labels (#1784)
  • d7a9f5e9 feature: support exchange link names of OVS bridge and provider nic in underlay networks (#1736)
  • b966dd59 perf: replace jemalloc to reduce memory usage (#1764)
  • 8bb8b173 fix: add omitempty to subnet spec (#1765)
  • fd676437 set sysctl variables on cni server startup (#1758)
  • 7c6250f3 avoid patch interface deletion & recreation during restart (#1741)
  • a91056a3 enqueue subnets after vpc update (#1722)
  • e895c5ff do not add subnet not processed by kube-ovn to vpc (#1735)
  • f13f3f46 add logrotate for kube-ovn log (#1740)
  • 70246fb9 fix: If pod has snat or eip, also need delete staticRoute when delete pod. (#1731)
  • 76e3c670 fix iptables for service traffic when external traffic policy set to local(#1725)
  • cee39213 optimize lrp create for subnet in vpc (#1712)
  • 21f0b979 fix: cancel delete staticroute when it's used by NatRule (#1733)
  • 4c2d0c86 fix: wrong info when update subnet from dual to ipv4 or ipv6. (#1726)
  • 417176ed fix: new ovn-ic static route method adapted due to old ovn version (#1718)

Contributors

  • Mengxin Liu
  • hzma
  • lut777
  • xujunjie-cover
  • zhangzujian
  • 张祖建

v1.9.7 (2022-07-18)

  • eb412c96 set release 1.9.7
  • 07bec2a2 prepare for release 1.9.7
  • a798a8c2 Get latest vpc data from apiserver instead of cache (#1684)
  • 8bc1b169 update priority range in htb qos (#1688)
  • ef4673d2 add upgrade-ovs script (#1681)

Contributors

  • Mengxin Liu
  • Wang Bo
  • hzma

v1.9.6 (2022-07-13)

  • 6db04118 set release 1.9.6
  • 885e41f6 prepare for release 1.9.6
  • 556a2cf8 shim: fix diffs of commits
  • 67da728a fix: change ovn-ic static route to policy (#1670)
  • a7a11f03 fix: Do not Recreate Logical_Router_Port when Vpc recreated (#1570)
  • e2ab703a feat: vpc peering connection
  • 7699a34b Delete pod if subnet of the pod's owner(sts/vm) updated (#1678)
  • 02e8973a security: disable pprof by default (#1672)
  • 0242b9c2 bgp: consolidate service check and use service const (#1674)
  • 3401d933 fix bgp: sync service cache (#1673)
  • f818ca5c fix libovsdb (#1664)
  • a11feff7 mount modules for auto load ip6tables moudles (#1665)
  • 2882cafc ignore pod not scheduled when reconcile subnet (#1666)
  • 91dfbbf4 fix get security group name by external_ids (#1663)
  • e56d581b add policy route when add subnet

Contributors

  • Mengxin Liu
  • Money Liu
  • Wang Bo
  • gugu
  • hzma
  • lut777
  • wangyd1988
  • 刘睿华
  • 张祖建
  • 范日明

v1.9.5 (2022-06-28)

  • 8a2cc741 set for release 1.9.5
  • 9935ab54 fix: no need routed when use v1.multus-cni.io/default-network (#1652)
  • 60d33ca9 prepare for release 1.9.5
  • a48e64ae CI: delete resources in order to avoid a long time waiting for subnet deletions. (#1643)
  • 502a7a00 set networkpolicy log default to false (#1633)
  • 0bda2e6f update policy route when join subnet cidr changed (#1638)
  • 3cfafe40 ci: update trivy options (#1637)
  • 71dba393 increase initial delay of ovs-ovn liveness probe (#1634)
  • cf0bbd92 wait ovn-central pods running before delete ovs-ovn pods (#1627)
  • 0877c3a7 get dbstatus for all ovn-central pod (#1619)
  • 51c409bd fix issues about OVN policy routing
  • 637503b4 use policy route instead of static route (#1618)

Contributors

  • hzma
  • xujunjie-cover
  • zhangzujian
  • 张祖建

v1.9.4 (2022-06-19)

  • c85ab203 ci: disable cilium e2e for release
  • 0a841aa1 prepare for release 1.9.4
  • f99f4e81 update ovs health check, delete connection to ovn sb db (#1588)
  • 82d7dd37 fix: all cluster pod will be in podadd queue (#1587)
  • 3c68cb9b fix pod could not be ready (#1562)
  • f39ff7a8 fix: delete pod panic when delete vm or statefulset. (#1565)
  • 4c60872f fix: keep vm's and statefulset's ips when user specified subnet (#1520)
  • 81781a01 do not gc vm pod lsp when vm still exists (#1558)
  • 4a28c014 fix exec cmd in vpc nat gateway (#1556)
  • 67db2bf3 CNI: do not return route if nic is not eth0 (#1555)
  • d5fce51d exit kube-ovn-controller on stopped leading (#1536)
  • 05a4b4dc remove name for default drop acl in networkpolicy (#1522)
  • 6fcc1975 tmp cancel cilium external svc test (#1531)
  • fe3bb3e5 move dumb-init from base images to kube-ovn image

Contributors

  • hzma
  • lut777
  • xujunjie-cover
  • 刘睿华
  • 张祖建

v1.9.3 (2022-05-13)

  • a2ba0c15 release 1.9.3
  • 0695d31e fix defunct ovn-nbctl daemon
  • f8594a29 optimize ovs request in cni (#1518)
  • 08f2961d optimize node port-group check (#1514)
  • 9ec4a430 reduce ovs-ovn restart downtime (#1516)
  • b55fa987 prepare for release 1.9.3
  • e4ba2e6d fix: ovs trace flow always ends with controller action (#1508)
  • 2e681af3 optimize IPAM initialization
  • 76fe9cef ci: skip some checks
  • 51dc9243 delete ipam record and static route when gc lsp (#1490)

Contributors

  • Mengxin Liu
  • hzma
  • zhangzujian

v1.9.2 (2022-04-25)

  • 6273d294 release for v1.9.2
  • c98322d7 fix: wrong vpc-nat-gateway arm image (#1482)
  • bc4f761c add delete ovs pods after restore nb db (#1474)
  • 945f2336 delete monitor noexecute toleration (#1473)
  • 35ecc687 add env-check (#1464)
  • 1f68e12a append metrics (#1465)
  • 302156bc masquerade packets from Pods to service IP
  • 4faa8831 add kube-ovn-controller switch for EIP and SNAT
  • 300a1643 ignore cni cve
  • 75383df3 add routed check in circulation (#1446)
  • c4f5f4d6 modify init ipam by ip crd only for sts pod (#1448)
  • 135798dc log: show the reason if get gw node failed (#1443)
  • 9bec51be9 modify webhook img to independent image (#1442)
  • e1d6dbf6 support keep-vm-ip and live-migrate at the same time (#1439)
  • 613b6ae5 update alpine to fix CVE-2022-1271
  • 553bedd2 fix adding key to delete Pod queue
  • d899cc97 fix IPAM initialization
  • e159443d ignore all link local unicast addresses/routes
  • 06bd4f86 fix error handling for netlink.AddrDel
  • 71e3f119 replace pod name when create ip crd
  • 8e65f6f6 support alloc static ip from any subnet after ns supports multi subnets (#1417)
  • 9bc2f96a fix provider-networks status
  • 269f819a recover ips CR on IPAM initialization
  • dc43dc20 create ip crd in kube-ovn-controller (#1413)
  • 41f8e26b add condition for triggering the deletion of redundant chassises in sbdb (#1411)
  • 2aedc6ac fix: do not recreate port for terminating pods (#1409)
  • d5556404 avoid frequent ipset update
  • c86ff85e fix: The underlay physical gateway config by external-gw-addr when use snat&eip (#1400)
  • deea9ded add reset for kube-ovn-monitor metrics (#1403)
  • 899de6ff check the cidr format whether is correct (#1396)
  • b54364b4 update dockerfile to use v1.9.1 base img
  • 24190501 append vm deletion check
  • 1953712a delete repeat para
  • 7c0348a7 update nodeips for restore cmd in ko plugin
  • f320ef8f fix external egress gateway
  • c3e17d8c add missing link scope routes in vpc-nat-gateway
  • 9d9d5878 increase memory limit of ovn-central
  • c4092113 fix range loop
  • 7397db27 update script to add restore plugin cmd

Contributors

  • Mengxin Liu
  • hzma
  • lut777
  • wangyd1988
  • xujunjie-cover
  • zhangzujian

v1.9.1 (2022-03-09)

  • 46eb49ad release update 1.9.1 changelog (#1361)
  • 59594fed add restore process for ovn nb db
  • de794986 optimize kube-ovn-monitor yaml
  • 47a16c38 add reset porocess for ovs interface metrics
  • a3618bcd fix SNAT/PR on Pod startup
  • 81247723 modify ipam v6 release ip problem
  • 0006902b skip ping gateway for pods during live migration
  • 092db781 update flag parse in webhook
  • 222a1fb6 feat: add webhook for subnet update validation
  • 0615254e keep ip for kubevirt pod
  • 87bb7f18 add check for pod update process
  • 7886467a fix ips update
  • ab3f0a6d append htbqos para in crd yaml
  • a68a55f9 fix: replace ecmp dp_hash with hash by src_ip (#1289)
  • dd08ecab fix OVS bridge with bond port in mode 6
  • 5fd56d1e fix: continue of deletion for del pod failed when can't found vpc or subnet (#1335)
  • 0d114958 Fix usage of ovn commands
  • 621e2b57 resync provider network status periodically
  • 10ac8c3a Revert "resync provider network status periodically"
  • fadc1316 fix statefulset Pod deletion
  • b74eaccc resync provider network status periodically
  • 9a0f708f fix underlay subnet in custom VPC
  • 69b3d72a append add cidr and excludeIps annotation for namespace
  • c63cb106 support to add multiple subnets for a namespace
  • 3f818b72 feat: update provider network via node annotation
  • 57f16570 fix: only log matched svc with np (#1287)
  • 288c5fe9 transfer IP/route earlier in OVS startup
  • 4c4390b3 add metric for ovn nb/sb db status
  • 92e7b975 check static route conflict
  • 67a7d85b set up tunnel correctly in hybrid mode
  • eabed9cc fix clusterrole in ovn-ha.yaml
  • 65b83219 add gateway check after update subnet
  • f3f8c4dc fix: validate statefulset pod by name
  • b5544bc3 add back centralized subnet active-standby mode

Contributors

  • Mengxin Liu
  • chestack
  • hzma
  • lut777
  • xujunjie
  • xujunjie-cover
  • zhangzujian

v1.9.0 (2022-01-12)

  • e4d48df3 prepare for release 1.9.0
  • c830594d fix: liveMigration with IPv6
  • e52b6897 update networkpolicy port process
  • 851ad0ce Add args to configure port ln-ovn-external
  • 5d95d628 update check for delete statefulset pod
  • 695f4532 ignore hostnetwork pod when initipam
  • 4b98d15f kubectl-ko: support trace Pods being created
  • 63bc25ea add dnsutils for base image
  • 6318d004 Add new arg to configure ns of ExternalGatewayConfig
  • 71522920 update scripts for 1.8.2
  • 960f02c1 Optimized decision logic
  • 8974f6a3 add svc cidr in ovs LB for optimization
  • 0192a9ae add doc for gateway pod in default vpc
  • 1f9dc754 optimize log for node port-group
  • 36d6b00a fix iptables rules and service e2e
  • 8dc938d8 add kubectl-ko to docker image
  • c4cc8f0d fix: invalid syntax error
  • a4f4cb49 fix pod tolerations
  • 8611de82 modify pod's process of update for use multus cni as default cni
  • 5ab83ba4 fix installation script
  • 09ef9be0 add log for ecmp route
  • 791b00f4 fix: ipv6 traffic still go into ct
  • 55e6a8ca append check for centralized subnet nat process
  • 58a44fb2 move chassis judge to the end of node processing
  • 9f0c42fa change nbctl args 'wait=sb' to 'no-wait'
  • 6f356705 use different ip crd with provider suffix for pod multus nic
  • f7b595dc fix service cidr in dual stack cluster
  • c510b439 add healthcheck cmd to probe live and ready
  • e14bc40c delete frequently log
  • bde98e75 support running ovn-ic e2e on macOS
  • 727ea53a pinger: fix getting empty PodIPs
  • 205a0c02 fix cni deepcopy
  • 650ea6d3 add cilium e2e
  • 46ba84ee filter used qos when delete qos
  • 1de284eb add protocol check when subnet is dual-stack
  • 1f4a247d lint: make go-lint happy
  • 91f3fa4b some fixes
  • d57bc1d7 compatible with OVN 20.06
  • 9116425a use multus-cni as default cni to assign ip
  • d18323a4 some fixes
  • 668c2125 perf: jemalloc and ISA optimization
  • 5c08d28d fix: check np switch
  • 36571555 fix: port security
  • e713bdf0 fix nat rule
  • d8e84cf0 When netpol is added to a workload, the workload's POD can be accessed using service
  • 51365b41 when update subnet's execpt ip,we should filter repeat ip
  • 5aacec59 update wechat image
  • 6c8fa978 fix: do not reuse released ip after subnet updated
  • e4648cc8 update: update 1.7-1.8 script
  • b1f8332c perf: do not send traffic to ct if not designate to svc
  • 178cf7b8 fix: add back the leader check
  • 7be43c97 fix port_security
  • e596c3c4 sync live migration vm port
  • e8b1ff5b docs: add f5 ces integration docs
  • 7058d568 update Go modules
  • 84dbb102 update delete operation for statefulset pod
  • e9e2c911 chore: update klog to v2 which embed log rotation
  • fafd5555 fix: add kube-ovn-cni prob timeout
  • 490590a4 append add db compact for nb and sb db
  • 4fb302f5 deleting all chassises which are not nodes
  • c49a7404 add db compact for nb and sb db
  • 3b7ec06c add vendor param for fix list LR
  • ae23d3df fix LB: skip service without cluster IP
  • df3d3977 add webhook with cert-manager issued certificate
  • 2be11269 security: update base ubuntu image
  • eb364717 add pod in default vpc to node port-group
  • ea300d2b fix pinger's compatibility for k8s v1.16
  • 3837b0a2 check IPv4 gateway by resolving gateway MAC in underlay subnets
  • 75604b5d add nodeSelector for vpc-nat-gateway pod
  • fac6c725 do not send multicast packets to conntrack
  • c3004bbc Revert "support to set NB_Global option mcast_privileged"
  • 2802b94d add ip address for lsp
  • 28a93927 fix: no need to set address for ls to lr port
  • 2048007a add sg acl check when init
  • b9abee71 cleanup command flags
  • 54a3b913 replace port-group named address-set with port-group since there's no ip set for lsp when create lsp
  • 743502cd support to set NB_Global option mcast_privileged
  • a5f0256a add networkpolicy support for attachment cni
  • 45f64bfa add process for pod attachment nic with subnet in default vpc
  • 49e9197e fix security group
  • 60e896f8 fix the duplicate call about strings.Split
  • c9f5f4b4 deepcopy fix steps
  • e0cb19aa fix: do not nat route traffic
  • 4e4d95d5 fix: Skip MAC address Settings when PCI addresse is unavailable
  • adce05c7 add ovn-ic e2e
  • 3b6b5034 other CNI can be used as the default network
  • 841f907b fix: move macvlan binary to host
  • 52ec0af4 Revert "ci: init kind cluster before build finish"
  • a8599325 fix ko trace
  • 1dd66a77 add ovn-ic HA deploy
  • bc3ce0bb fix node address set name
  • cbed2820 update cni init image
  • a648bfc6 chore: update kind k8s to 1.22 and remove pre 1.16 support
  • a1d56e97 do not set bridge-nf-call-iptables
  • 738c7612 use logical router policy for accessing node
  • 6719ee24 ci: init kind cluster before build finish
  • 61817bf4 reduce qos query with ovs-vsctl cmd
  • 1776c447 fix read-only pointer in vlan and provider-network
  • 329228d4 fix: trace in custom vpc
  • a9c0a4aa fix read-only pointer in vlan and provider-network
  • 62df3416 update docs
  • a546ba95 fix LB in dual stack cluster
  • eb63f72e fix: check allocated annotation in update handler
  • 55b8b8ac support using logical gateway in underlay subnet
  • ef424d73 docs: optimize cilium integration docs
  • a09e84d0 fix: ensure all kube-ovn components deleted before annotate pods
  • e7aeb96e fix bug: logical switch ts not ready
  • dc4e693f Fix unpopulated CPU charts
  • 003723e5 Revert "get default subnet"
  • 418feb1b add htbqoses rbac
  • 850e4218 feat: pod can use multiple nic with the same subnet
  • 5840d509 add error detail
  • e6377cae add check switch for default subnet's gateway
  • b5b6c326 get default subnet
  • fbafca41 remove node chassis annotation on cleanup
  • 348eaf36 update: add 1.7 to 1.8 update scripts
  • f934613d base: add macvlan to help vpc setup
  • cd1dda1e fix: delete vpc-nat-gw deployment
  • 50eddac3 ko: check ovsdb storage status
  • 20670e87 fix cleanup.sh and uninstall.sh
  • b31c4d19 use constant instead a string
  • 86f63f26 fix: check and load ip_tables module
  • 3bfd82b7 fix: multus-cni subnet allocation
  • e5ed1ace docs: add svg
  • 17ff6c55 chore: update install
  • ce97b94c integrate Cilium into Kube-OVN
  • fda0c17b fix kubectl-ko diagnose
  • 3f8a2b0e change inspection logic from manually adding lsp to just readding pod queue
  • 01ca82f9 fix pinger in dual stack cluster
  • 0ba64dea add e2e testing for dual stack underlay
  • 7f27a05d fix pinger and monitor in underlay networking
  • 6a56f8bb fix kubectl plugin ko
  • 2c9fe438 adjust the location of the log
  • 86ee933a ci: push vpc-nat-gateway
  • f459ca97 replace api for get lsp id by name
  • 0a533984 docs:revise vpc.md
  • 78847899 grafana: optimize grafana dashboard
  • 168a7c97 In netpol egress rules, except rule should be set to != and should not be ==
  • d7edf24b ci: add vpc-nat-gateway build
  • 5cd32df8 Update OVN to version 21.06
  • dd36d61c modify kube-ovn as multus-cni problem
  • d17f6151 support to set htb qos priority
  • c20e0111 perf: add fastpath module for 4.x kernel
  • ff5d3df3 add inspection
  • 3e9f9a99 perf: add stt section and update benchmark
  • d3842327 feat: optimize log
  • 4c6c29a3 fix: init node with wrong ipamkey and lead conflict
  • 47255a10 fix installation scripts
  • fd745487 fix getting LSP UUID by name
  • 1f5719a5 fix StatefulSet down scale
  • 5bccd845 fix vpc policy route
  • acb82de0 docs: update roadmap
  • 87f9b863 refactor: mute ovn0 ping log and add ping details
  • a99c4200 fix: wrong link for iptables
  • 52b01c01 fix IPAM for StatefulSet
  • 51511e63 append externalIds for pod and node when upgrade
  • 391f7014 feature: LoadBalancer for custom VPC
  • 7fd8cf44 feat: support vip
  • 25f634fb fix VPC document
  • 97a5b2a3 fix init ipam
  • 71fcbf12 fix: gc lb
  • 2b154b1a Update prometheus.md
  • 1e766f9c feat: support VLAN subnet in VPC
  • 4c013a3e ci: push dev image to separate repo
  • 39c8a19c fix: kubeclient timeout
  • edaf41e0 fix: serialize pod add/delete order
  • 78a77f79 perf: increase ovn-nb timeout
  • 5937ccbf fix gc lsp statistic for multiple subnet
  • c71620ce fix: re-check ns annotation to avoid annotations lost
  • d40d5701 perf: do not diagnose external access
  • 871c1493 feature: vpc support policy route
  • 90b1a2ea reactor: remove ovn ipam options
  • 7f43f25c perf: switch's router port's addresses to "router"
  • 8dbe8f94 lint: make staticcheck happy
  • 8ad46dad fix e2e testing
  • 5a126378 prepare for next release
  • 5b70c81d fix variable referrence
  • 42fed929 fix typos
  • f59aff27 refactor: reuse waitNetworkReady to check ovn0 and slightly improve the installation speed
  • ea723d6d fix nat-outgoing/policy-routing on pod startup
  • 2439c86e feat: suport vm live migration

Contributors

  • Mengxin Liu
  • MengxinLiu
  • azee
  • chestack
  • feixiang43
  • huangjunwei
  • hzma
  • lhalbert
  • liqd
  • luoyunhe
  • lut777
  • pengbinbin1
  • vseeker
  • wang_yudong
  • wangchl01
  • zhangzujian
  • 范日明

v1.8.18 (2023-10-11)

  • ec9304fd Dockerfile: fix base image version
  • 772df6f1 pinger: increase packet send interval (#3259)
  • 74762b9f prepare for 1.8.18 release
  • fd5344c7 ci: pin go version to 1.20.5 (#3034)
  • 98c0e3cd static ip in exclude-ips can be allocated normally when subnet's availableIPs is 0 #3031
  • 9f298105 prepare for 1.8.17 release
  • e84053f2 add subnet match check when change subnet gatewayType from centralized to distributed (#2891)
  • 188a9aa7 add static route for active-standby centralized subnet when use old active gateway node (#2699)
  • bb41c58d prepare for next release

Contributors

  • hzma
  • zhangzujian
  • 张祖建
  • 马洪贞

v1.8.15 (2023-04-24)

  • f5af4306 ci: add publish action
  • 87deba9b netpol: fix packet drop casued by incorrect address set deletion (#2677)
  • 385a76aa do not set subnet's vlan empty on failure (#2445)
  • 8177808e ci: fix cilium chaining e2e (#2391)
  • 0c7a5018 ci: fix ref name check (#2390)
  • 7365a4c8 ci: skip netpol e2e automatically for push events (#2379)
  • 18ef2f28 e2e: run specs in parallel (#2375)
  • 6b5325d7 fix CVE-2022-28948
  • 7a424dc8 fix CVE-2022-41723
  • 1192be2c ci: fix default branch test (#2369)
  • bb914568 fix github actions workflows (#2363)
  • 6ac19b94 simplify github actions workflows (#2338)
  • 9db146c0 do not remove link local route on ovn0 (#2341)
  • eb6d0bbd fix encap ip when the tunnel interface has multiple addresses (#2340)
  • 53df20f8 enqueue endpoint when handling service add event (#2337)
  • de289b74 fix getting service backends in dual-stack clusters (#2323)
  • 0f20dea6 fix github actions workflow
  • 544c229d An error occurred when netpol was added in double-stack mode (#2160)
  • 1746f6cf bump base image
  • f4efd0bc fix gosec ci installation (#2295)
  • 35b22bbc fix CVE-2022-41721
  • ffd625f1 fix network break on kube-ovn-cni startup (#2272)
  • b42e9d15 fix gosec installation
  • 8f24823d add release-1.8/1.9/1.10 to scheduled e2e (#2224)
  • f1d5369b release-1.8: refactor e2e (#2214)
  • ae99c07a prepare for release 1.8.15
  • 25e7f432 fix: ovs gc just for pod if (#2187)
  • a2e5e5db fix: change condition to conditions
  • d54c4481 do not add subnet not processed by kube-ovn to vpc (#1735)
  • 371f95c6 kind: support to specify api server address/port (#2134)
  • b46b103c fix: sometimes alloc ipv6 address failed sometimes ipam.GetStaticAddress return NoAvailableAddress
  • 7d6a162a fix lint
  • afcfbea9 replace klog.Fatalf with klog.ErrorS and klog.FlushAndExit (#2093)
  • 09f675cf fix: del createIPS (#2087)
  • 170a947d fix ovs bridge not deleted cause by port link not found (#2084)
  • e132558d fix: replace replace with add to override existing route (#2061)
  • 73b037b2 fix OVN LS/LB gc (#2069)
  • 2b3c1f4f perf: reduce controller init time (#2054)
  • ea80eb9a ovs: fix reaching resubmit limit in underlay (#2038)
  • 9c8ffcf6 fix pinger namespace error (#2034)
  • ea5b9313 update np name with character prefix
  • ff3ac899 bump kind and node image versions (#2023)
  • 97424b11 fix ovn nb/sb health check (#2019)
  • ce4861f2 fix ovs fdb for the local bridge port (#2014)

Contributors

  • Mengxin Liu
  • Noah
  • changluyi
  • lut777
  • tonyleu
  • wangyd1988
  • zhangzujian
  • 张祖建
  • 马洪贞

v1.8.14 (2022-11-04)

  • aec4eaeb fix: get ecmp nodecheck back (#2016)
  • b714e057 fix: gateway route should stay still when node is pingable (#2015)
  • 898247c0 do not need to delete pg when update networkpolicy (#1959)
  • 7adf4ea7 do not set bridge-nf-call-iptables
  • d6ddf891 add check of write to ovn sb db for ovn-controller (#1989)
  • 4e17fe73 fix grep matching device in routes (#1986)
  • eb0cf474 delete pod after TerminationGracePeriodSeconds (#1984)
  • 264beb59 ovs: fix waiting flows in underlay networking (#1983)
  • 640806d5 use latest base image
  • 469b32ae ovn db: recover automatically on startup if db corruption is detected (#1980)
  • fd155293 prepare for release 1.8.14
  • 4dbefaf2 fix CVE-2022-32149
  • 317780a4 avoid concurrent subnet status update (#1976)
  • 3d0c5eb6 modify build error
  • b65b3de1 fix metrics name (#1977)
  • 05011718 add vm pod to ipam by ip when initIPAM (#1974)
  • 0890fdf9 validate nbctl socket path in start-controller.sh
  • e5c59e5b skip CVE-2022-3358 (#1972)
  • 2f4a56a3 use latest base image
  • ea03249d fix: add default deny acl (#1935)
  • e89ace5e ovs: fix mac learning in environments with hairpin enabled (#1943)
  • 62491a53 Fix registry for ovn-central container in install.sh (#1951)
  • d96cba57 ovs: add fdb update logging (#1941)
  • 433c3b93 prepare for release v1.8.13
  • 93e82147 set ovsdb-server vlog level to avoid warnings caused by ovs-vsctl (#1937)
  • a03c8064 update Go to v1.17
  • 41e697a1 add network partition check in ovn probes
  • 78e73937 feat: Replace command health check with k8s tcpSocket check (#1251)
  • df29bb2e fix CVE-2022-27664
  • b35037d0 update ns annotation when subnet cidr changed (#1921)

Contributors

  • Mengxin Liu
  • hzma
  • lut777
  • runzhliu
  • zhangzujian
  • 尚墨
  • 张祖建
  • 范日明
  • 马洪贞

v1.8.12 (2022-09-13)

  • 6e97d651 set release 1.8.12
  • 845ee70f prepare release 1.8.12
  • c39d51a3 fix: gatewaynode might be null (#1896)
  • 08331bae fix: api rollback
  • 3f96a632 fix logrotate issues
  • fb4ac005 fix security issues
  • d289215e security: conform to gosec G114 (#1860)
  • 7451d098 fix: diskfull may lead to wrong raft status for ovs db (#1635)
  • dd22f682 kubectl-ko: turn off pipefail for ovn leader check (#1891)
  • d2be779e fix ip6tables link
  • e1034427 fix duplicate logs for leader election (#1886)

Contributors

  • Mengxin Liu
  • lut777
  • zhangzujian
  • 尚墨
  • 张祖建

v1.8.11 (2022-08-30)

  • 9f059091 set release 1.8.11
  • 5fa2a8e1 feat: reduce downtime by increasing arp cache timeout
  • c18cae4e feat: reduce wait time by counting the flow num.
  • c8e36b5e fix: missing stop_ovn_daemon args
  • e5735c20 delete log severity for drop acl when update networkpolicy (#1862)
  • 4bcfb373 prepare release for 1.8.11
  • 9d7f0a59 ovs: fix log file descriptor leak in monitor process (#1855)
  • 446ee6a2 fix ovs-ovn logging (#1848)
  • 63b218c6 fix: multus macvlan ipvlan use kube-ovn ipam,but ip not inited in init-ipam (#1843)
  • 95c8ca4f ko: fix kube-proxy check (#1842)
  • b7b7d26d avoid patch interface deletion & recreation during restart
  • 2746a195 ci: switch environment to ubuntu-20.04 (#1838)
  • cacb1ec4 fix base failure
  • 3941595b update base image
  • 2938daaa fix base build failure
  • 122754aa update centralized subnet gateway ready patch operation
  • c3f23af3 fix duplicate log for tunnel interface decision (#1823)
  • 3d966bff update version to v1.8.10 (#1819)
  • dfc89924 do not check static route conflict (#1817)
  • a6403f0e update centralize subnet gatewayNode until gw is ready (#1814)
  • 7103aae8 initialize IPAM from IP CR with empty PodType for sts Pods (#1812)
  • b669c673 abort kube-ovn-controller on leader change (#1797)
  • 0e0ea3c7 avoid invalid ovn-nbctl daemon socket path (#1799)
  • a7f499dd do not wait dynamic address for pod (#1800)
  • 2b34fd58 update vpc-nat-gateway base
  • 8d2d0b1e append delete static route for sts pod (#1798)
  • 9dc6e15e perf: fix memory leak
  • 14beb484 perf: disable mlockall to reduce memory usage
  • e6eace89 set sysctl variables on cni server startup (#1758)
  • 020b20de fix: add omitempty to subnet spec (#1765)
  • 3e77c51c fix CVE-2022-21698
  • c5212982 add logrotate for kube-ovn log (#1740)
  • ef275cc1 fix: cancel delete staticroute when it's used by NatRule (#1733)
  • 513a30b5 fix: wrong info when update subnet from dual to ipv4 or ipv6. (#1726)
  • aef889ae Get latest vpc data from apiserver instead of cache (#1684)

Contributors

  • Mengxin Liu
  • Wang Bo
  • bobz965
  • hzma
  • xujunjie-cover
  • zhangzujian
  • 张祖建

v1.8.9 (2022-07-13)

  • 9050b22d set release 1.8.9
  • c42900d6 prepare for release 1.8.9
  • ff928386 [PATCH] Delete pod if subnet of the pod's owner(sts/vm) updated (#1678)
  • f216a2f5 security: disable pprof by default (#1672)
  • a984c913 update ovs health check, delete connection to ovn sb db (#1588)

Contributors

  • Mengxin Liu
  • Wang Bo
  • hzma

v1.8.8 (2022-06-28)

  • 0fbefff5 set release 1.8.8
  • 37df8e76 prepare for release 1.8.8
  • bf873330 CI: delete resources in order to avoid a long time waiting for subnet deletions. (#1643)
  • de117356 add ovn-ic HA deploy
  • 1dcf9a43 set networkpolicy log default to false

Contributors

  • hzma
  • lut777
  • 张祖建

v1.8.7 (2022-06-19)

  • 46987551 prepare for release 1.8.7
  • b6796d09 cni handler: do not wait routed annotation for net1 (#1586)
  • f5c3ed3f fix adding static route after LSP deletion (#1571)
  • f7ee860b fix duplicate netns parameter (#1580)
  • 0a3468b1 do not gc vm pod lsp when vm still exists (#1558)
  • d453add3 fix exec cmd in vpc nat gateway (#1556)
  • 8303ace0 CNI: do not return route if nic is not eth0 (#1555)
  • bc758245 exit kube-ovn-controller on stopped leading (#1536)
  • c51b09e8 remove name for default drop acl in networkpolicy (#1522)
  • 9fe8cfcd move dumb-init from base images to kube-ovn image
  • 2a8a45a1 fix defunct ovn-nbctl daemon

Contributors

  • hzma
  • zhangzujian
  • 张祖建

v1.8.6 (2022-05-13)

  • 56bf06df release 1.8.6
  • 9e5b2b28 reduce ovs-ovn restart downtime (#1516)
  • e4d6cc2f prepare for release 1.8.6
  • 60aa8913 fix: ovs trace flow always ends with controller action (#1508)
  • 2a074c6f optimize IPAM initialization

Contributors

  • Mengxin Liu
  • zhangzujian

v1.8.5 (2022-04-27)

  • 9b96bacf ci: skip some checks
  • e20cf4a2 delete ipam record and static route when gc lsp (#1490)
  • 035f5072 CVE-2022-27191 (#1479)
  • e898c96e add delete ovs pods after restore nb db (#1474)
  • 89d7471c delete monitor noexecute toleration (#1473)
  • 4b012aa6 add env-check (#1464)
  • 3d0448b4 append metrics (#1465)
  • a0e2404c add kube-ovn-controller switch for EIP and SNAT
  • ca2ca1a1 add routed check in circulation (#1446)
  • c9dfa5bb modify init ipam by ip crd only for sts pod (#1448)
  • 8b5ce74a ignore cni cve
  • 22fe8fbe log: show the reason if get gw node failed (#1443)
  • 8570e286 update alpine to fix CVE-2022-1271
  • 6aa6b0a9 fix adding key to delete Pod queue
  • bf12ea0e fix IPAM initialization
  • 5e005884 ignore all link local unicast addresses/routes
  • 63248040 fix error handling for netlink.AddrDel
  • aa7c3b8d replace pod name when create ip crd
  • f0bb2769 support alloc static ip from any subnet after ns supports multi subnets
  • 7a67a213 fix provider-networks status
  • 8529bf8b recover ips CR on IPAM initialization

Contributors

  • Mengxin Liu
  • hzma
  • zhangzujian

v1.8.4 (2022-03-29)

  • 48eb70a4 release update 1.8.4 changelog (#1414)
  • 2fe7fff2 create ip crd in kube-ovn-controller (#1412)
  • 01163c1c fix: add condition for triggering the deletion of redundant chassises in sbdb (#1411)
  • c262bdcf fix: do not recreate port for terminating pods (#1409)
  • bf167a60 avoid frequent ipset update
  • b44bbc5d fix: The underlay physical gateway config by external-gw-addr when use snat&eip (#1400)
  • ffdd1967 add reset for kube-ovn-monitor metrics (#1403)
  • eda71b3c check the cidr format whether is correct (#1396)
  • 62695032 update dockerfile to use v1.8.3 base img
  • c15afc54 append vm deletion check
  • 9faf2a10 update nodeips for restore cmd in ko plugin
  • 621a37f0 fix external egress gateway
  • 27af3335 update ip assigned check
  • 4d88bea5 add missing link scope routes in vpc-nat-gateway
  • bf8026ed increase memory limit of ovn-central
  • 5a52041b fix range loop

Contributors

  • hzma
  • lut777
  • wangyd1988
  • xujunjie-cover
  • zhangzujian

v1.8.3 (2022-03-09)

  • 37937fcf release update 1.8.3 changelog (#1360)
  • 014ecc87 add restore process for ovn nb db
  • dbf4774d optimize kube-ovn-monitor yaml
  • ce8087d7 add reset porocess for ovs interface metrics
  • 62938245 deepcopy fix steps
  • 118f1299 fix SNAT/PR on Pod startup
  • 9fa2c792 add check for pod update process
  • f053f2a2 fix ips update
  • fe9532d4 fix cni deepcopy
  • c76e9b01 fix: replace ecmp dp_hash with hash by src_ip (#1289)
  • f3922ba9 keep ip for kubevirt pod
  • f6628902 fix OVS bridge with bond port in mode 6
  • a421d9f8 fix: continue of deletion for del pod failed when can't found vpc or subnet (#1335)
  • cf7f4bd9 Fix usage of ovn commands
  • 586a0764 ignore cilint
  • e083a2ba resync provider network status periodically
  • dcb3e82d Revert "resync provider network status periodically"
  • 18740e5c fix statefulset Pod deletion
  • 85c15cb4 resync provider network status periodically
  • 172c1733 feat: optimize log
  • 136aedf9 optimize log for node port-group
  • 0869e621 append add cidr and excludeIps annotation for namespace
  • e04eaf7a support to add multiple subnets for a namespace
  • ae201ef5 feat: update provider network via node annotation
  • 5cf005e2 fix: only log matched svc with np (#1287)
  • 6ef52c22 transfer IP/route earlier in OVS startup
  • 75157be8 add metric for ovn nb/sb db status
  • 4b23c84c check static route conflict
  • 0832f5ef set up tunnel correctly in hybrid mode
  • 175d54d1 fix clusterrole in ovn-ha.yaml
  • 457475f2 add gateway check after update subnet
  • 45787fb7 add back centralized subnet active-standby mode
  • a737e196 update networkpolicy port process
  • ff6bf6fa update check for delete statefulset pod

Contributors

  • chestack
  • hzma
  • lut777
  • xujunjie-cover
  • zhangzujian

v1.8.2 (2022-01-05)

  • 5acf9586 release: update 1.8.2 changelog
  • 49b2ae40 add log for ecmp route
  • 798d0bb9 fix pod tolerations
  • c5f4c8e6 fix installation script
  • 270d28e4 append check for centralized subnet nat process
  • ee691fb5 change nbctl args 'wait=sb' to 'no-wait'
  • c4956ac3 move chassis judge to the end of node processing
  • 636b946a use different ip crd with provider suffix for pod multus nic
  • a03a858c use multus-cni as default cni to assign ip
  • 3205b88e fix: do not reuse released ip after subnet updated
  • 7de6afb8 delete frequently log
  • efefc20b pinger: fix getting empty PodIPs
  • d98fab8d add protocol check when subnet is dual-stack
  • 0a48f6a6 filter used qos when delete qos
  • 26f239aa fix: check np switch
  • 4187a329 When netpol is added to a workload, the workload's POD can be accessed using service
  • e7c50077 when update subnet's execpt ip,we should filter repeat ip
  • 86020295 fix: add back the leader check
  • dfa1a3a8 security: upadate base image
  • 7f1e9354 update delete operation for statefulset pod
  • 17301ee2 chore: update klog to v2 which embed log rotation
  • 7cfeee1e fix: add kube-ovn-cni prob timeout
  • 88a92ac9 append add db compact for nb and sb db
  • 9496e386 add vendor param for fix list LR
  • 641dcdde deleting all chassises which are not nodes
  • ad0bc1b7 add db compact for nb and sb db
  • b50da0e1 fix pinger's compatibility for k8s v1.16
  • 723ec5c3 fix LB: skip service without cluster IP
  • d412c780 security: update base ubuntu image
  • b96b7056 add pod in default vpc to node port-group
  • e1dfa7b1 add sg acl check when init
  • c8692dfb fix: no need to set address for ls to lr port
  • ef0e3b95 fix ko trace
  • 7231a6f2 fix read-only pointer in vlan and provider-network
  • 01e30a42 fix read-only pointer in vlan and provider-network
  • 72cf31dd fix: trace in custom vpc
  • 03639a4a fix: multus-cni subnet allocation
  • 1857130e fix LB in dual stack cluster
  • 3773bedf prepare for release 1.8.2
  • 45316125 fix: check allocated annotation in update handler
  • 79be0cde fix bug: logical switch ts not ready
  • e3581cf1 fix: ensure all kube-ovn components deleted before annotate pods
  • 9847a1b6 Revert "add check switch for default subnet's gateway"
  • c106afa6 add check switch for default subnet's gateway
  • bdf5b0e2 remove node chassis annotation on cleanup
  • 31a5da22 fix: delete vpc-nat-gw deployment
  • 765ede7b fix: serialize pod add/delete order
  • 78dc1fbf change inspection logic from manually adding lsp to just readding pod queue
  • 986f8b4e add inspection
  • 15ea6ab8 fix: check and load ip_tables module
  • 9bb0cfc2 fix cleanup.sh and uninstall.sh
  • da422ff9 fix kubectl-ko diagnose
  • cc8a4da0 fix pinger in dual stack cluster
  • 9364d2a2 add e2e testing for dual stack underlay
  • ecf4e011 fix pinger and monitor in underlay networking
  • 91a32d41 fix kubectl plugin ko
  • 259f8d6a replace api for get lsp id by name
  • 7e775fa6 In netpol egress rules, except rule should be set to "!=" and should not be "=="
  • 0a09e055 modify kube-ovn as multus-cni problem

Contributors

  • Mengxin Liu
  • hzma
  • lut777
  • wang_yudong
  • zhangzujian
  • 范日明

v1.8.1 (2021-10-09)

  • 31f53094 release: prepare for 1.8.1
  • fa66c5f8 fix: init node with wrong ipamkey and lead conflict
  • fa17c3d6 fix installation scripts
  • c7d050b9 fix getting LSP UUID by name
  • f0bebbec fix StatefulSet down scale
  • 4c189b7f refactor: mute ovn0 ping log and add ping details
  • c208cd51 fix: wrong link for iptables
  • b4faf60b fix IPAM for StatefulSet
  • d0525957 append externalIds for pod and node when upgrade
  • 34ba16ea perf: increase ovn-nb timeout
  • f844a2bc fix: re-check ns annotation to avoid annotations lost
  • f7214195 perf: do not diagnose external access
  • 6232c73b reactor: remove ovn ipam options
  • 651ab41e perf: switch's router port's addresses to "router"
  • f5997a87 fix gc lsp statistic for multiple subnet
  • da43e21b fix e2e testing
  • 5e3c1507 fix variable referrence
  • bc95b5d3 fix nat-outgoing/policy-routing on pod startup

Contributors

  • Mengxin Liu
  • hzma
  • lut777
  • zhangzujian

v1.8.0 (2021-09-08)

  • 7c5fed65 fix adding OVN routes in dual stack Kubernetes
  • 80a037ee release: prepare for 1.8
  • f59bfb86 add update process and adding label to ls/lsp/lr
  • e09d99b3 fix: VLAN CIDR conflict check
  • e6b8341e security: update base image
  • 29422965 update provider network CRD
  • 25b151c8 fix external-vpc
  • 44a8b4f6 perf: use link alias to filter packet
  • e9984fe0 security: fix CVE-2021-3538
  • d41c5e9b add print columns for subnet/vpc/vpc-nat-gw crd
  • 730e4f17 improve support for dual-stack
  • c148a5ac initialize ipsets on cni server startup
  • 10613e87 delete residual ovs internal ports
  • 361d4bbe simplify vlan implement
  • 6fde0a56 fix: ovn-northd svc flip flop
  • b1106056 add container run command for runtime containerd
  • 42e212ca fix subnet conflict check for node address
  • 3d2c6eb9 feat: read interface in installation from environment
  • 35acf424 update encap ip by node annotation periodic
  • 13b2080a fix ipset on pod creation/deletion
  • f415b1ba add ready status for provider network
  • 09283849 avoid Pod IP to be the same with node internal IP
  • 70fbbecc remove subnet's spec.underlayGateway field
  • 96b0c118 add support for custom routes
  • 45aafca2 Add missing metadata directive in VpcNatGateway example
  • 0380d64c use util.hostNameEnv instead KUBE_NODE_NAME
  • 38e04f34 chore: change wechat image
  • 5df9fdd4 fix typo
  • 4a7dd734 perf: add fastpath and tuning guide
  • 3d8cdb6c update node labels and provider network's status.readyNodes when provider network is not initialized successfully in a node
  • 8596ddc9 fix issues in underlay networking
  • 7724990d add external vpc switch
  • ffef618d update versions in docs and yamls
  • 6e8d5c80 update Go to version 1.16
  • 3deb5770 fix IPv6-related issues
  • 2e4922d5 ci: use stable version
  • dcda11d6 fix: bad udp checksum when access nodeport
  • f12e5ee5 fix port-security, address parameters should be merged into one
  • f03d4350 docs: optimize description
  • b5b5bdb8 ensure provider nic is up
  • b5bbed38 fix uninstall.sh
  • 3ba5168c some optimizations
  • 9ae0b3c3 fix gofmt lint
  • 410d9329 fix multi-nic.md
  • 5e9e41ac fix dual stack cluster created by kind
  • 386d6160 remove external egress gateway from additionalPrinterColumns
  • 70ae50ef fix default bind socket of cni server
  • 56025ede if the string of ip is empty,program will die
  • 9492f63f if the string of ip is empty,program will die
  • 324dce2e fix underlay networking on node reboot
  • f7077d58 add judge before use the index about cidrBlocks and ips
  • f25b1ae2 add validation check function
  • bda102a7 docs: add wechat qcode
  • 14ccbeb3 feat: security group
  • 992a09d3 delete subnet AvailableIPs and UsingIPs para
  • 057ade92 fix: panic when node has nil annotations
  • 59869daa append pod/exec resource for vpc nat gw
  • 3ed2fe26 update comment for SetInterfaceBandwidth
  • e1caa594 update qos process
  • 80e5e2ba fix LoadBalancer in custom VPCs
  • bb1146ee Support Pod annotations control port mirroring
  • 4c4b0900 fix docs
  • a04d964d externalOvnRouters is ok with 0
  • 9524c93f delete attachment ips
  • 6dd6a51d fix external_ids:pod_netns
  • cbe8ae68 add switch for network policy support
  • dc56d238 fix subnet e2e
  • e3daee83 ignore empty strings when counting lbs
  • 81ce45c2 fix iptables
  • e9ea6a0f fix issue #944
  • 1cb57358 fix openstackonkubernetes doc bugs
  • fcdb0106 add switch for gateway connectivity check
  • 4dc4624f fix cleanup.sh
  • 4fb97407 security: fix CVE-2021-33910
  • 41b6429c delete ecmp route when node is deleted
  • 5bd96ac7 fix: if nftables not exists do no exit
  • 6c5efbc3 update wechat contract method
  • e449b8ea delete overlapped var subnet
  • 2427a4b3 add designative nat ip process for centralized subnet
  • 1595eac5 fix ipsets
  • 7e24e7d6 update underlay e2e testing
  • 27c649a5 match chassis until timeout
  • df76038a fix CRD provider-networks.kubeovn.io
  • d1c7a2ee fix: set vf mac
  • 949c28c2 update qos ingress_policing_burst
  • 8a05bdc8 add field defaultNetworkType in configmap ovn-config
  • 1810dfc3 keep subnet's vlan empty if not specified
  • 4e28600d delete ecmp route when node is not ready
  • d145f575 add del learned routes when remove ovnic
  • 6499e585 [kubectl-ko] support trace in underlay networking
  • 23d84f0a fix subnet available IPs
  • eced6bac fix bug for deleting ovn-ic lrp failed
  • a4abbb2e add node internal ip into ovn-ic advertise blacklist
  • 2ec0aa74 underlay/vlan network refactoring
  • ead2c65f chore: update ovn to 21.03
  • 651a634d security: fix CVE-2021-3121
  • 8cff6851 list ls with label to avoid listing ts failure
  • 3fd9c7ac Update log error
  • 0fe67258 delete the process of ip crd delete in cni delete request
  • 9049fc72 update networkpolicy process
  • a5b22a21 modify func name Additonal to Additional
  • 0cd5dcfe fix uninstall.sh execution in OVS pods
  • b4ce83a2 perf: enable tx offload again as upstream already fix it
  • 9ca47b65 label lr, ls and lsp, and add label filter when gc
  • 37a045a3 security: add go build security options
  • bdf91846 feat: ko support cluster operations status/kick/backup
  • efdce464 docs: update docs about vlan/internal-port/kubeconfig
  • ced43405 add judge before use slices's index
  • 3d98d762 update kind to version v0.11.1
  • e1e63cfa adapt to vfio-pci driver
  • 205f5712 fix IP/route transfer on node reboot
  • a3cac539 add master check when a node adding to a cluster and config sb/nb address
  • b98afeef update installation scripts
  • 2d750cbf enable hw-offload
  • 64b9abae do not delete statefulset pod when update pod
  • 4359c198 fix: node route should filter out 'vpc'
  • 744e6577 feat: lb switch
  • 7ec2f994 docs: show openstack docs and docker image status
  • 5484387f fix: clean up gateway chassis list for external gw
  • acc95f1d add doc for openstack/kubernetes hybrid deploy
  • e2973c4f configure OVS internal port after dummy interface
  • 8608b7e5 some fixes in vlan initialization
  • 872340c8 clean up vpc service
  • fde89914 feat: vpc load balancer
  • 8ed91be4 fix: lsp may lost when server pressure is high
  • 42fbe86e fix: check crds when controller start
  • a5fef59b start evpc ph1
  • 31ee8c10 start evpc ph1
  • 44db142e ci: retry arm build when failed
  • 96c13985 update ecmp notes
  • 8c169322 add interface name in cni response
  • aa88e2a2 add nicType for offload
  • eb387428 1.Support to specify node nic name 2.Delete extra blank lines
  • cb8cc645 ignore update pod nic annotation when is not nil
  • 3a4347b9 set default UnderlayGateway to true in vlan mode
  • a0d78920 unify logical entity list funcs (#863)
  • 9e563d84 ci: remove dpdk ci
  • e48a0894 correct vlan e2e testing
  • f690085d fix: remove rollout check
  • 2b2df3dc adapt internal tcpdump
  • 2531779a update docker buildx install method
  • eef1b0aa fix: remove wait ovn sb
  • 2e59e81c fix: ci issues
  • df47c489 fix: cleanup kube-ovn-monitor resource
  • 598cffdd fix multi-nic.md
  • f4b75bd0 fix: acl overlay issues
  • 2fe4fe1d ci: split ovn/ovs into base image
  • db2b7b06 add judge before use slices's index
  • 3e259ae9 update version to v1.7 in docs
  • eb54dc03 update master version to v1.8.0

Contributors

  • Mengxin Liu
  • Ruijian Zhang
  • Tobias
  • feixiang43
  • hzma
  • lhalbert
  • lut777
  • pengbinbin
  • pengbinbin1
  • wang_yudong
  • xieyanker
  • xuhao
  • zhang.zujian
  • zhangzujian
  • 范日明
  • 马洪贞

v1.7.3 (2021-10-09)

  • 6329a275 release: prepare for 1.7.3
  • a17dd60d fix: disable periodically gc
  • 26a355d9 fix installation scripts
  • be8b5ea7 fix StatefulSet down scale
  • 506e95d5 fix: init node with wrong ipamkey and lead conflict
  • 7fed7ee3 refactor: mute ovn0 ping log and add ping details
  • 9110bcef fix: wrong alias for iptables
  • 18053abd fix: northd probe issues
  • 698d92c6 fix IPAM for StatefulSet
  • 0c1baacb append externalIds for pod and node when upgrade
  • 905b789f security: update base image
  • 7d86e2c5 fix gc lsp statistic for multiple subnet
  • 6ce5cd8b fix: kubeclient timeout
  • c3b72cff fix: serialize pod add/delete order
  • 530a3dd0 refactor: reuse waitNetworkReady to check ovn0 and slightly improve the installation speed
  • 121c9a41 perf: increase ovn-nb timeout
  • 1f97edcc fix: re-check ns annotation to avoid annotations lost
  • c79244fc perf: do not diagnose external access
  • 6bc241fc reactor: remove ovn ipam options
  • 74ab9aa1 perf: switch's router port's addresses to "router"
  • a5791a01 fix e2e testing
  • 6505e2e4 fix variable referrence
  • d1f14509 fix nat-outgoing/policy-routing on pod startup

Contributors

  • Mengxin Liu
  • hzma
  • lut777
  • zhangzujian

v1.7.2 (2021-09-08)

  • cd650db4 fix: VLAN CIDR conflict check
  • 4cabb12c perf: use link alias to filter packet
  • af4a1983 security: fix CVE-2021-3538
  • c6daff2a prepare for release v1.7.2
  • 18241707 initialize ipsets on cni server startup
  • cf32ab1e delete residual ovs internal ports
  • 7d94413f fix: ovn-northd svc flip flop
  • 316d141e fix subnet conflict check for node address
  • d44273e9 update comment for SetInterfaceBandwidth
  • 06810be2 update encap ip by node annotation periodic
  • 99ec3d4a delete subnet AvailableIPs and UsingIPs para
  • c57c6dbc fix ipset on pod creation/deletion
  • ef9dbc5b add ready status for provider network
  • 8906e457 avoid Pod IP to be the same with node internal IP
  • 85b57239 update node labels and provider network's status.readyNodes when provider network is not initialized successfully in a node
  • 078c0c8b fix issues in underlay networking
  • 2919288a fix IPv6-related issues
  • aaf56e65 ci: use stable version
  • 25609873 fix: bad udp checksum when access nodeport
  • 78077f34 ensure provider nic is up
  • 154f21c3 fix uninstall.sh
  • 7a4c5a59 fix gofmt lint
  • 169a3256 if the string of ip is empty,program will die
  • 1065c8e4 fix dual stack cluster created by kind
  • dd756c05 fix default bind socket of cni server
  • 6ebbbbf4 update kind to v0.11.1
  • ad2b08ec fix underlay networking on node reboot
  • 2ba31cc1 append pod/exec resource for vpc nat gw
  • 7831f803 fix: panic when node has nil annotations
  • 554cc044 update qos process
  • a47d9297 delete attachment ips
  • b633ab3c fix external_ids:pod_netns
  • b3190ef8 fix subnet e2e
  • ae3cc954 ignore empty strings when counting lbs
  • a9bee809 fix iptables
  • 5cd1b14e fix image version
  • a93e2dec fix cleanup.sh
  • 0e3c1cbc security: fix CVE-2021-33910
  • 50da96ae delete ecmp route when node is deleted
  • 851dd303 fix: if nftables not exists do no exit
  • e48c985b delete overlapped var subnet
  • 1dfcf6df match chassis until timeout
  • 4f09a0d5 update qos ingress_policing_burst
  • a63de27a fix ipsets
  • cc51be3d update underlay e2e testing
  • 7cd02fef fix CRD provider-networks.kubeovn.io

Contributors

  • Mengxin Liu
  • Ruijian Zhang
  • feixiang43
  • hzma
  • lut777
  • zhangzujian
  • 范日明

v1.7.1 (2021-07-15)

  • 1b289a22 ready for release v1.7.1
  • 795fbdf0 add field defaultNetworkType in configmap ovn-config
  • dc440c76 keep subnet's vlan empty if not specified
  • 7b7eef98 update ecmp notes
  • d26850de delete ecmp route when node is not ready
  • 72a73fb6 delete the process of ip crd delete in cni delete request
  • 22a296e5 fix subnet available IPs
  • b6076028 [kubectl-ko] support trace in underlay networking
  • 0b877b96 underlay/vlan network refactoring
  • 7c529a18 adapt internal tcpdump
  • 10481d9b fix bug for deleting ovn-ic lrp failed
  • 1adb788f add node internal ip into ovn-ic advertise blacklist
  • f9d542ee security: fix CVE-2021-3121
  • 498c7dd1 feat: ko support cluster operations status/kick/backup
  • d812c746 fix uninstall.sh execution in OVS pods
  • fd512511 perf: enable tx offload again as upstream already fix it
  • f41d5742 security: add go build security options
  • feedaca8 fix IP/route transfer on node reboot
  • 5406d701 add master check when a node adding to a cluster and config sb/nb address
  • 136ead43 do not delete statefulset pod when update pod
  • 1ef87e13 fix: node route should filter out 'vpc'
  • 0761fe7a some fixes in vlan initialization
  • 63122eb8 fix: clean up gateway chassis list for external gw
  • 96e22451 ci: remove dpdk ci
  • 7003890e correct vlan e2e testing
  • dcdf75a3 configure OVS internal port after dummy interface
  • 9b70842a fix: lsp may lost when server pressure is high
  • 1f48f9fd 1.Support to specify node nic name 2.Delete extra blank lines
  • 8c37d4b9 ignore update pod nic annotation when is not nil
  • 00e2e009 set default UnderlayGateway to true in vlan mode
  • f11cdf94 fix: remove rollout check
  • 2d67471d fix: remove wait ovn sb
  • ba7d6553 fix: cleanup kube-ovn-monitor resource
  • 1e1da5a5 fix: acl overlay issues
  • 00681fb0 update version to v1.7 in docs

Contributors

  • Mengxin Liu
  • Ruijian Zhang
  • hzma
  • lut777
  • xuhao
  • zhangzujian
  • 范日明
  • 马洪贞

v1.7.0 (2021-06-03)

  • 907b34d2 prepare for release v1.7.0
  • ab727c98 diagnose: check sa related resource
  • 9bd2e9f8 fix: do not nat route traffic
  • 3bd14945 fix: release ip addresses even if pods not found
  • f4794183 fix typo
  • 2a2160d0 docs: add description of custom kubeconfig
  • 3dd99a79 fix: add address_set to avoid error message
  • ba40fd67 optimize Makefile
  • cb95f4e6 update vlan document
  • 31a96f21 add label to avoid deleting other
  • 6cd6b34b delete unused log
  • 34734010 add ovs internal-port for pod network interface
  • 9e715623 support underlay mode with single nic
  • d6c96d07 support underlay mode with single nic
  • c1d3fc3c fix: add node to pod allow acl
  • ed49cd49 traffic rate for multus nic
  • 1b00190f add ovs internal-port for pod network interface
  • 775aec6c Add maintainers
  • 59847bc1 add e2e tests for external egress gateway
  • a0006ebf fix e2e testing on macOS
  • 0ff3d6bb ci: fix lint and scan error
  • 33e0ec27 fix: check if provider network exists
  • 9e53d4cc update subnet document
  • a2e4fec4 rename ExternalGateway to ExternalEgressGateway
  • 1ccaec9a fix installation doc
  • 34fb4759 fix: forward policy to accept
  • bbbd091f ci: fix lint error
  • 28cf4cc2 traffic rate for multus nic
  • 0dcf6930 refactor: optimize service.go and subnet.go
  • 7719fc2a Check and Fetch all ValidatePodNetwork errors
  • 123ead48 add judge about nic address
  • 17fe2302 implement new feature: external gateway
  • 01686e3e start_ic should run regardless of ts port
  • c733c7e4 add judge before use index
  • ba709afb specify ovs ops on diff nodes
  • 07089205 fix mss rule
  • 4458a4d7 Get node info from listerv1.NodeLister(index)
  • 19a7aed9 Clean up the wrong log
  • 27fe348a refactor: optimize subnet.go
  • ddfd06b2 Optimise the redundancy code
  • bd55c104 Handler the parse config error before used
  • bd3f13dc ci: remove 3-master e2e
  • 9e827e7b Remove the unnecessary rm command
  • 587bbcdb Use localtime when the kube-ovn installed
  • a52a38d0 Fix the different time from container and host
  • 436e788b add issue template
  • 5fc3cfb1 add bgp doc
  • f16fcb9a support afisafis
  • d94af379 feat: support graceful restart
  • 26a02725 fix: del might panic if duplicate delete
  • 41226d86 fix: lr-route for eip using nic-ip, and not external gateway addr.
  • d176dac7 feat: support announce service ip
  • 136571d1 Fix some minor nits for docs
  • 2781a47b add bpg options in bgp.md
  • 1b788902 add Opstk&K8s ic doc
  • cc843816 add holdtime function
  • b9e96339 fix: do not re-generate ts port
  • 610f132b fix: ignore root path doc ci
  • bd1e0975 fix: do not gc learned routes
  • be2048be feat: add vxlan in README.md
  • cbb2ddd4 fix: get_leader_ip always return fist node ip
  • 03f597ce fix: remove tty error notification
  • cc353bbc fix ovn nb reconnect
  • af2709df add docs for 'multus ovn network'
  • ffc20a91 add vpc nat gateway docs
  • a1ae937a fix: static route for default multus network
  • 0489a72a feat: support vxlan tunnel
  • 77f65449 append delete ovn-monitor in ovn.yaml
  • c5ee49e8 split ovn-central and ovn-monitor
  • e0890f72 Fix mount the systemid path
  • fc92fbc2 handle update deployment vpc-nat-gw
  • 686681ef refactor: remove function genNatGwDeployment's return error
  • 064c3851 Update crd vpc-nat-gateways.kubeovn.io for pre-1.16
  • a0dfea1b fix incorrect method for gateway node judgement
  • 86c99c37 Fix the 'multus how to use' link
  • 1acb4992 fix multi nic
  • 9c5ca0a0 fix duplicate imports
  • b4750853 fix: compatible with JSON format
  • 2a2cd27a fix: leader may change during startup, use cluster connection to set options.
  • aad81548 fix SNAT on pod startup
  • 388119a7 fix development guide
  • 2efdac9a fix gofmt
  • c264bec1 fix: configure nic failed when ifname empty
  • 763f8bcf fix: port does not support vlan tag update
  • a60764ea fix build dev image
  • faa7bc6a support hybrid mode for geneve and vlan
  • d8472ba7 remove extra space
  • f9c836b6 fix: compatible with no norhtd svc
  • bbed09d3 fix chassis check for node
  • dfdf5f8b optimization for ovn/ovs status metric
  • 9e82ca3d fix: release norhtd lock when power off
  • 1fbfad52 add single node e2e
  • f9ae6258 fix get pod attachment net
  • 0632e253 support ovn defautl attach net
  • 2c1a8aa6 add network-attachment-definitions clusterRole
  • 808a3a93 feat: multus ovn nic
  • 28e14188 update node ip when upgrade to dualstack
  • 0265747d add details for prerequisite
  • 3e42f684 Add Ecmp Static Route for centralized gateway
  • b72e9d50 fix: disable offload if geneve port exists
  • f4e665b9 disable offload for genev_sys_6081
  • acade01b refactor: optimize ovn command when error exists
  • 5251c272 add net-attach-def ClusterRole
  • 5126aedd add lsp with external_id
  • ec7f7425 feat: multus ovn nic
  • 19e23d14 fix: check ovn0 status
  • c02afc00 livenessprobe fail if ovn nb/ovn sb not running
  • 983831e0 fix: disable checksum offload for ovn0 to prevent kernel issue
  • d9f166b7 ignore ip6tabels check for v4 hostIP
  • 680802d6 improve the code style of [import group ordering]
  • 8e38a79d fix wrong sequence
  • 1e0d77c3 update arm64 build
  • 638a03ac fix: restart ovn-controller to force update flows
  • 14784fbb fix: disable checksum validation
  • a04dcfb6 Use public network effective image
  • 24095d7f update usingips check when update finalizer for subnet
  • 54ef1af2 fix dependency
  • 717688d6 Update vendor.
  • 496fc4dd trim space the port_binding's output
  • 00fdac83 refactor: remove unnecessary config logic
  • b06dad21 update maintainers
  • e5d9584e docs: deprecated webhook
  • 92cc4ed3 fix: add missing ovn-ic binary
  • c0349e4f chore: change action name
  • 1a448ecc chore update artworks
  • 537588c3 fix: delete chassis_private when delete node
  • a50fb181 Add 'kubectl ko trace' command's default namespace
  • fad9473d Add 'kubectl ko trace' command's default namespace
  • 77c92ca8 perf: reclaim heap memory after compaction.
  • f3df58ae remove the old script
  • b69f389c docs: add CNCF description
  • 08b95e74 fix: gc not exist node error
  • 9f661461 perf: use new option to decrease ovn-sb size
  • 9dc06908 fix: return err
  • 8bd44608 docs: add faq section
  • 482e6f71 add vpc nat gateway Dockerfile
  • b0e983f0 feat: vpc nat gateway
  • 951e31ea add node address allocate check when init
  • 215c8f45 update upgrade for ovn-default and join subnet
  • a537985d fix: lint error
  • d0d3e89c fix: add missing ovn-ic-db schema
  • 98651014 update subnet ip num calculate
  • d6bb03bd fix: masq traffic to ovn0 from other nodes
  • 0a7024f9 refactor: reduce duplicated GetNodeInternalIP function
  • ac294669 chore: update go version
  • 0e9c717d chore: move build dependency from alauda to kubeovn
  • 64fac57a feat: support set default gateway in install script
  • ca71de3c docs: fix typos
  • 582cb9ce Update install-pre-1.16.sh
  • 62fc20ef Update install.sh
  • 87859ac1 go import repo change to kubeovn
  • 1152744e feat: vpc nat gateway
  • 298138e4 Resolving typo.
  • 4701fcb3 filter repeat exclude ips
  • e3931f0e modify ip count for dual
  • a4ddb360 docs: add ARCHITECTURE.MD
  • 9eee6f93 refactor: reduce duplicated function
  • a7b687a0 fix: add dpdk pod name
  • d32b423b Update cleanup.sh
  • 9faaff57 Update cleanup.sh
  • df065f94 test: add service e2e
  • 60e49f5a modify test problem
  • 2dbcb76f fix: kube-proxy check
  • 512044cb ovn-central: set default db addr same with leader node to fix nb and sb error 'bind: Address already in use'
  • c755ef23 fix: reset ovn0 addr
  • a168c282 tests: add e2e for ofctl/dpctl/appctl
  • f6dc58a5 ci: replace image
  • b1d03370 docs: clarify dpdk usage scenario
  • 21d9940b ci: update kind version and set timeout
  • 8b833ee5 Update install-pre-1.16.sh
  • 4b6f0eed Update install.sh
  • f6f88501 refactor: remove duplicated call
  • 473cdc48 Update kubectl-ko
  • 1ca17686 Fix missing square brackets in curl ipv6
  • 136336b2 Modify the health check for kube-proxy port, compatible with ipv6
  • 98a56dec Update controller.go
  • c52c067b Fix: remove IsNotFound when get configmap external gateway
  • 74fa7729 Fix: check kube-proxy's 10256 port healthz
  • d594554d fix: ip6tables check error
  • b17f2373 Add MAINTAINERS file
  • 2783c134 add vpcs && vpcs/status clusterRole
  • 31e1226e Update install-pre-1.16.sh
  • f1efaa7f delete connect to ovsdb for ovn-monitor
  • f69ae44b cni-bin-dir,cni-conf-dir configurable Fix kubeovn#655
  • f5999b3b Update install.sh
  • e13448aa Error: unknown command "ko" for "kubectl"
  • 7d56483a Fix: wrong split in FindLoadbalancer function
  • 34776b8a vlan nic support regex
  • f23093c4 fix underlay gateway flood logs
  • 4a9901aa fix: check required module before start
  • 8d4694f8 docs: add underlay docs
  • 3713b253 chore: update ovn to 20.12 and ovs to 2.15
  • 1ab87130 prepare for next release
  • a94803d3 fix: make sure northd leader change
  • 03487cf2 fix: make sure ovn-central is updated one by one
  • 9d3b78a3 fix: restart when init ping failed
  • 6e09c77d fix: increase raft timer to avoid leader flap
  • 87aa15cb pass golangci-lint
  • 134ea89d add golangci-lint to github actions
  • d325e7e0 fix pod terminating not recycle ip when controller not ready
  • 87af4ca9 fix: add new iptable cleanup commands
  • d287063b modify static gw changed problem
  • fcf3be19 Fix wait pod network ready take long time
  • 0b4e4458 fix: when address is empty, skip route/nat deletion
  • ed0e9ba2 fix: update ipam cidr when subnet changed
  • 06816efb modify test problem for dual-stack upgrade

Contributors

  • Amye Scavarda Perrin
  • JinLin Fu
  • Mengxin Liu
  • Wan Junjie
  • Yan Wei
  • Yan Zhu
  • caoyingjun
  • chestack
  • cmj
  • danieldin95
  • halfcrazy
  • hzma
  • luoyunhe1
  • lut777
  • pengbinbin1
  • sayicui
  • wangyudong
  • withlin
  • xieyanker
  • zhangzujian
  • 范日明
  • 马洪贞

v1.6.3 (2021-06-03)

  • 8e28e139 prepare release for v1.6.3
  • 2818eb86 fix: do not nat route traffic
  • be20533b fix: release ip addresses even if pods not found
  • 1bdff344 security: fix crypto CVE
  • f29958db fix: add address_set to avoid error message
  • 04fc67f8 fix: add node to pod allow acl
  • 91d43e01 Handler the parse config error before used
  • 634f672b fix: del might panic if duplicate delete
  • 7795b519 fix: do not re-generate ts port
  • 37ed257f fix: get_leader_ip always return fist node ip
  • 548a5c55 fix: do not gc learned routes
  • 4e8a7c99 fix: remove tty error notification
  • 9e060882 fix ovn nb reconnect
  • 1b35390f perf: reclaim heap memory after compaction.
  • 703174a8 fix: leader may change during startup, use cluster connection to set options.
  • 14de53e7 fix SNAT on pod startup

Contributors

  • Mengxin Liu
  • Yan Zhu
  • caoyingjun
  • chestack
  • zhangzujian
  • 马洪贞

v1.6.2 (2021-04-18)

  • 2f421181 release 1.6.2
  • 23c9240d fix: configure nic failed when ifname empty
  • 6574447f remove extra space
  • b65d41ad fix chassis check for node
  • bec0d0f4 fix: compatible with no norhtd svc
  • ef76fcc0 fix: release norhtd lock when power off
  • fefcff27 fix: disable offload if geneve port exists
  • a1679923 disable offload for genev_sys_6081
  • 12e6b0b1 rebuild to fix openssl cve
  • a5862310 fix: check ovn0 status
  • 03956f1f ignore ip6tabels check for v4 hostIP
  • 35f06495 livenessprobe fail if ovn nb/ovn sb not running
  • 3f15c923 fix: disable checksum offload for ovn0 to prevent kernel issue
  • 54f5102d add node address allocate check when init
  • 07bea935 update arm64 build
  • 995022e6 fix: restart ovn-controller to force update flows
  • 21c312c0 fix: disable checksum validation
  • 73bb2d83 update usingips check when update finalizer for subnet

Contributors

  • Mengxin Liu
  • danieldin95
  • halfcrazy
  • hzma
  • lut777

v1.6.1 (2021-03-09)

  • 87e11481 fix: add missing ovn-ic binary
  • dbf53f6e release for 1.6.1
  • 2dcd7584 fix: delete chassis_private when delete node
  • f8aeb887 chore: update ovn to 20.12 ovs to 2.15
  • 35190e1c refactor: reduce duplicated function
  • afe9a9f0 fix: masq traffic to ovn0 from other nodes
  • 96880905 ovn-central: set default db addr same with leader node to fix nb and sb error 'bind: Address already in use'
  • cce2bb4d fix: reset ovn0 addr
  • 8152bdf5 Fix: wrong split in FindLoadbalancer function
  • 33b0e186 fix underlay gateway flood logs
  • 9a8e7870 fix: check required module before start
  • b70f6103 fix: make sure northd leader change
  • ecbd43e2 fix: restart when init ping failed
  • 4b752988 fix pod terminating not recycle ip when controller not ready
  • 0e794679 fix: add new iptable cleanup commands
  • cf725882 Fix wait pod network ready take long time
  • bbb7edc6 fix: when address is empty, skip route/nat deletion
  • 7121fa80 fix: update ipam cidr when subnet changed
  • 99d8981f prepare for 1.6.1
  • 8559014f move build dependency from alauda to kubeovn
  • 9184aa93 update upgrade for ovn-default and join subnet
  • f11c6b3c update subnet ip num calculate
  • e5e6e302 fix: ip6tables check error
  • 23dcd2a3 delete unused import packet
  • 5ead6b1d filter repeat exclude ips
  • 30217437 modify ip count for dual
  • b4560b99 modify test problem
  • b4b55581 add vpcs && vpcs/status clusterRole
  • d6f14147 delete connect to ovsdb for ovn-monitor
  • 98859f9b modify static gw changed problem
  • 255e20c6 modify test problem for dual-stack upgrade

Contributors

  • Mengxin Liu
  • Wan Junjie
  • Yan Zhu
  • cmj
  • hzma
  • wangyudong
  • xieyanker

v1.6.0 (2021-01-04)

  • d47ccb67 release: 1.6.0
  • b8f221bf docs: add docs for vpc
  • 12cf140b fix typo
  • b13cb7bf ci: update go version to 1.15
  • 7f9eefed Fix: replace the command to run the script via 'sh' with 'bash'
  • 076ab28f Fix the default mtu parameter's describe
  • 8e608667 modify network policy process
  • 171dcff6 upgrade for subnet from single protocol to dual-stack
  • bbc68577 add network policy adapt for dual-stack
  • c01766cf feat: update ovn to 20.09
  • 315831aa docs: prepare docs for 1.6.0 release
  • a1e7974f perf: add pprof to pinger
  • 627956e9 doc for dual-stack
  • 02751bf4 Update the container nic name use the CNI_IFNAME parameter which passed by kubelet
  • 14f36814 ci: enable docker experimental feature
  • 9a785fc9 ci: build multi arch image
  • 03ff96e6 (np) fix mulit np rule and gateway bug
  • 20f3fcb1 fix start-db.sh echo message
  • 52b39d76 fix: iface check error
  • 072870b1 fix: add missing ping due to deb build
  • efdd3913 fix: find iface by full match first then regex match
  • f922ef75 fix: livenessProb/readinessProb might conflict when run logrotate at same time
  • f1fe2b2e modify subnet and ip crds
  • a2d76df7 modify service vip parse error
  • 8aa5d0a4 update vendor
  • 44381c74 update client-go
  • 96c1c100 fix: np with multiple rules
  • 87e6ded0 modify loop error for get metrics
  • 1e2a7477 diagnose: add more diagnose info
  • aea12bae ci: trigger action when yamls change
  • 7bd6bf39 fix: ha e2e failed
  • 56774aaf fix: allow traffic to gateway
  • a78c2661 fix: cni-server default encap ip use right interface ip
  • 7d31e617 feat: change default build image to ubuntu
  • e2cd7871 add build for dualstack
  • ddda6332 feat: distributed eip
  • a6fef94a Add CNI modify for dualstack
  • a54bfc28 Debian: Add debian docker image support
  • 8a01cb1c Add adaption for dualstack, part of daemon process.
  • 9738af18 chore: reduce binary size
  • 6483d6e3 modify build problem
  • dab50b33 Append ip monitor to document
  • 34428819 license: fix felix dir
  • 2ef66568 feat: support advertise subnet route
  • ecbd01a6 Add IP Num Alert
  • d64e6931 Add adaption for dualstack, part of controller process.
  • 7246037b convert ip to string
  • 2aecb3d9 add pod static ip validate
  • b58e01b6 chore: add COC and roadmap
  • 7bbdc00f fix: move felix to self repo to remove bird license
  • d2b570cf Add license scan report and status
  • 86584b95 fix: default network
  • ccea68bf release for 1.5.2
  • 07347501 fix: ovn-ic support ssl
  • 4d8b186a fix: nat rules can be modified
  • f535460f fix: remove svc cidr routes
  • e3082cd7 ci: specify ubuntu version to make github action happy
  • f6cce9a0 fix: specify exec container to mute warning message
  • 2215c05f feat: remove cluster ip dependency for ovn/ovs components
  • a9747b31 fix: add resources limits to avoid eviction
  • 00571196 fix: vpc static route manage
  • 8deb5d8d fix: validate vpc subnet
  • 256ac6c5 Fix external-address config description
  • ccda611a Fix the problem of confusion between old and new versions of crd
  • f2f64801 fix: ovn-central check if it exits in NODE_IPS
  • 5b973a89 fix: check ipv6 requirement before start
  • 86941a8a feat: add ovs/ovn log rotation
  • ef41733c add node ping total count metric
  • 5e6bd911 diagnose: add ovs-vsctl show to diagnose results
  • 7301e992 fix: nat rules
  • 6026028a fix: masq other nodes to local pod to avoid nodrport triangle traffic
  • d41110ec Update install.sh to allow dpdk limits configuration (#546)
  • a128d7fc format
  • b6ad17b5 test: e2e uses IPVS cluster by default
  • f6951cf5 chore: update go version to 1.15
  • 1f703c3d fix: tolerate all taints
  • f8ace73c feature: add vpc static route
  • f62cb4eb fix: cleanup script error
  • 3bac21f7 docs: modify eip config description
  • 1f07d96b security: remove sqlite to mute cve warning
  • 015bc625 test: add e2e for kubectl-ko
  • aa86e406 feat: pinger can return exit code when failed
  • 2cf855ec fix: nat traffic that from host to svc
  • cbe0ad55 docs: new feat for disable-ic, regex iface and pod bind subnet
  • 5dbaf2d3 sync the default subnet of ns by vpc's status
  • dd2234f4 fix: devault vpc lb/dns
  • 32c49c1b fix: shutdown vpc workqueue
  • 67076d62 fix: subnet CIDRConflict
  • d5b819b0 fix: subnet bind to ns
  • 921190ef feature: add vpc crd
  • b5ecac95 Release and gc the resources in vpc
  • 15eca9dc fix: gc logic router
  • 91fec563 gc and clean vpc
  • 7a0e28b9 Remove the VPC while removing the default subnet
  • 99217cec feature: support custom vpc
  • 9d821bce chore: refactor log
  • 240cd800 feat: iface support regexp
  • 94b6b1b5 feat: support disable interconnection for specific subnet
  • 652190c3 modify review problems
  • 7285581a docs: v1.5.1 changelog
  • 47f0acbb perf: accelerate ic and ex gw update
  • bafac87e fix: missing version date
  • 8ef12007 fix: check multicast and loopback subnet
  • 3b20abb0 monitor: refactor grafana dashboard
  • f9cbaea5 docs: do not allow install to namespace other than kube-system
  • 559e2cd8 update review problems for ovn_monitor
  • 1c356a36 monitor: add more dashboard
  • aa7b20d7 chore: add vendor
  • 97d64f93 Updated Dockerfile.dpdk1911 to use Centos8 and DPDK19.11.4
  • b4aa989d fix: CodeQL scan warning
  • a27e1760 fix: ipt wrong order and add cluster route
  • 9eb96dd7 opt: only allow specifies default subnet
  • 0da634e8 chore: reduce image size
  • 93bf5423 feature: Support for namespace binding multiple subnets
  • e37159c2 docs: fix multi nic subnet options
  • c35a159b docs: add pinger/controller/cni metrics
  • 7f5b4237 fix: add default ssl var for compatibility
  • 59b70696 Add monitor doc
  • bb130cac fix: ipv6 network format when update subnet
  • dc62d105 fix: ipv6 len mismatch
  • 6088851d chore: add version info
  • 88001376 metrics: add ovs client latency metrics
  • 3cafd5f8 Add OVN/OVS Monitor
  • 89567776 docs: performance test method
  • 0c975e34 fix: wrong port porto for udp
  • f3759b78 docs: add descriptions of local files
  • b46acd6c ci: add github code scan
  • 2444d51a fix: do not adv join cidr when enable ovn-ic
  • 292bf4ca perf: remove default acl rules
  • 20e82c39 prepare for next release
  • 9324491c fix: use internal IP when node connect pod
  • c1870c1a ci: change to docker buildx action
  • a1976650 fix: delete pod when marked with deletionTimestamp
  • c3c4f1c5 fix: remove not alive pod in pg

Contributors

  • Emma Kenny
  • Mengxin Liu
  • MengxinLiu
  • Wan Junjie
  • emmakenny
  • feixiang
  • fossabot
  • hzma
  • luoyunhe1
  • wiwen
  • xieyanker
  • 范日明

v1.5.2 (2020-12-01)

  • 498d74d7 release for 1.5.2
  • 271c07bd fix: nat rules can be modified
  • 21a5edbd fix: add resources limits to avoid eviction
  • 762f1c21 ci: specify ubuntu version to make github action happy
  • bd4019dd fix: remove svc cidr routes
  • 93a89753 Fix the problem of confusion between old and new versions of crd
  • 031f5436 Fix external-address config description
  • 3371ce4c fix: ovn-central check if it exits in NODE_IPS
  • cf4c4127 fix: check ipv6 requirement before start
  • 186d90cd feat: add ovs/ovn log rotation
  • b5dfc1c6 diagnose: add ovs-vsctl show to diagnose results
  • 37cbb713 add node ping total count metric
  • 6ed020c2 fix: tolerate all taints
  • 1a4f48a0 chore: update go version to 1.15
  • e0fc3331 fix: masq other nodes to local pod to avoid nodrport triangle traffic
  • f6ff2780 Update install.sh to allow dpdk limits configuration (#546)
  • 96636386 prepare for 1.5.2
  • 06d8b374 fix: cleanup script error
  • 5ddf72b2 security: remove sqlite to mute cve warning
  • 1fe42677 chore: refactor log
  • 0f1b74dc fix: nat traffic that from host to svc
  • 24b97cb0 feat: iface support regexp

Contributors

  • Mengxin Liu
  • emmakenny
  • hzma
  • xieyanker

v1.5.1 (2020-10-26)

  • bf860e26 release 1.5.1
  • cf96d6db opt: only allow specifies default subnet
  • 99e393ec feature: Support for namespace binding multiple subnets
  • fa4006c0 perf: accelerate ic and ex gw update
  • c327535a fix: check multicast and loopback subnet
  • d74e2078 fix: CodeQL scan warning
  • df8530a3 fix: ipt wrong order and add cluster route
  • 33afdd18 fix: add default ssl var for compatibility
  • f14155e4 fix: broken rpm link
  • a99ecbee fix: ipv6 network format when update subnet
  • 5fbb92b0 fix: ipv6 len mismatch
  • bbda6a80 fix: wrong port porto for udp
  • 42b7aa12 fix: do not adv join cidr when enable ovn-ic
  • 34952c80 perf: remove default acl rules
  • 2ad71107 fix: use internal IP when node connect pod
  • c42d42f1 ci: change to docker buildx action
  • ba401065 fix: delete pod when marked with deletionTimestamp
  • f8a4e656 fix: remove not alive pod in pg

Contributors

  • Mengxin Liu
  • 范日明

v1.5.0 (2020-09-28)

  • c0a34b84 release: prepare for release 1.5.0
  • 95548457 perf: use podLister to optimize k8s calls
  • 6635f930 chore: enable ssl to default ci tests
  • 5f29fc30 security: change ovsdb file access to 600
  • 0e0a6887 docs: improve hw-offload
  • a1a215dc feat: support db ssl communication
  • e7a88c11 diagnose: show nb/sb/node info
  • 090624fd fix: pinger diagnose should use cmd args
  • fae393e3 fix: ipv6 get portmap failed again
  • b74189fe fix: ipv6 get portmap failed
  • f1c2f995 fix: delay mv cni conf to when cniserver is ready
  • 98bb7510 chore: update kind and kube-ovn-cni updateStrategy
  • 64640421 monitor: add cni grafana dashboard
  • 38adc18f monitor: add more kube-ovn-cni metrics
  • 36e9091d feat: update pinger dashboard
  • ab736d8f fix: issues with vlan underlay gateway
  • 2e5f0ecb feat: set more metadata to interface external_ids
  • 77c4a5f2 feat: grace stop ovn-controller
  • ebfc1530 refactor: fix bridge-mappings and refactor vlan code
  • 729ed3c7 fix: allow mirror config update
  • 84bb3c83 fix: cleanup v6 iptables and ipset
  • da493717 docs: add gateway docs and optimize others
  • ece4219f feat: integrate ovn sfc
  • 2b2e7a9a feat: support pod snat
  • 7a60b569 prepare for next release
  • e9933619 fix: ovn-ic-db restart failed
  • 115c1266 fix: stop ovn-ic when disabled
  • e9861444 fix: use nodeName as chassis hostname

Contributors

  • Mengxin Liu

v1.4.0 (2020-09-01)

  • 0f973a5a prepare for 1.4 release
  • 78ab9b1e fix: do not gc learned routes
  • 3ddb9614 chore: add psp
  • f847e5be perf: apply udp improvement
  • a8f0d228 chore: sync pre-1.16 install.sh
  • 0918e9a2 ci: use go 1.15
  • f43a1027 fix: add prob timeout to wait script finish
  • c5ca0b1b resolve review problem
  • 28d5a8aa chore: suppress verbose logs
  • df54b0d1 fix: do not gc ic logical_switch
  • b9ab4d66 fix: only gc VIF type logical_switch_port
  • 731fef99 docs: update docs
  • e9ae40a9 chore: add back lflow reduction optimization
  • 022c7903 chore: update ovs to 2.14.0
  • 8e93c054 fix: remove duplicated gcLogicalSwitch
  • c3b7457a fix: modify src-ip route priority
  • e0096f9b fix: missing session lb to logical switch
  • 6fbcc198 feat: ovn-ic integration
  • 0ea62c16 fix:resolve gosec check problem
  • b2d0393b feat: do not perform masq on external traffic
  • 4e1ad126 chore: fix patch failure
  • a7c460a4 fix: subnet acl might conflict if allowSubnets and subnet cidr cover each other
  • 0dd85e46 feat: acl log drop packets
  • 6d048632 chore: remove juju log dependency
  • 9535c26b feat: gw switch from overlay to underlay
  • 4b095580 chore: prepare for 1.4 release
  • c9d07e1d fix: prevent update failed logs
  • a98ec5bd fix: ko use external-ids to find related nic
  • 1cad39ce fix: forward accept rules

Contributors

  • Mengxin Liu
  • hzma

v1.3.0 (2020-07-31)

  • 45d30713 chore: add build date
  • c9953234 release: update 1.3.0 docs
  • 34627a66 fix: call appendMssRule function to resolved mss according problem
  • bb961ae5 dpdk: add kmod, pdump and proc-info tools
  • cf47ee1b fix: ci image tags
  • 46768179 chore: optimize dpdk build
  • 5c107687 docs: add hw-offload docs and resolve some issues
  • e64c6132 fix: if sriov device, do not delete the host nic
  • f55c3fba fix: use keymutex to serialize pod add/delete operation
  • d438574d feat: assign a pod as the gw
  • 1806a572 ci: add arm build to normal ci process
  • 5aed1ef1 ci: add unfixed cve
  • 19201a36 ci: arm64 build accelerate
  • 63fbc008 chore: add logs to sriov interface
  • 82140c93 ci: add ipv6 install e2e
  • c3814c72 feat: recycle lsp at runtime
  • 3f9d7c92 fix: qos error
  • e460541d fix: variable error
  • de9493f2 ci: modify cache usage
  • 1994e5c3 ci: save ci time
  • 5c4d5a3c chore: use j2 to render different kind.yaml
  • d1a184ef fix: set qlen for ovn0
  • a2d969e8 prepare for 1.3 release
  • 3a018a86 chore: update build.sh
  • be7c68f2 fix: log error
  • 31723f66 chore: check ovn-sb connectivity from ovn-ovs probe
  • d017f1f2 fix: available ips calculation issues
  • 309c8080 perf: add hw offload
  • 4b8faede docs: add gateway qos doc
  • 32a9af2b ci: remove master taint
  • 3865220d chore: update cni dependencies
  • 8e032392 feat: session service
  • 34b7cba7 Revert "perf: use policy-route to replace src-ip route"
  • 1d13d5c3 Revert "fix: ipv6 policy route"
  • 65813640 Revert "fix: reset address_set when delete subnet"
  • e6817a65 fix: reset address_set when delete subnet
  • dbc968ca test: statefulset without ippool
  • 9440a11f match apps/* statefulset
  • ca122027 fix: ipv6 policy route
  • 54acd0c3 feat: support gw qos
  • b8f03248 perf: use policy-route to replace src-ip route
  • 83dc420e Solve the problem of non-standard statefulset creation mode
  • 32e6d572 fix: arm64 build missing env
  • c93f0d84 action: use commit as image tag
  • 732b240c Add libatomic to docker image
  • 9d5294bb chore: save disk space when building
  • 4b1f5244 chore: change crd form v1beta1 to v1
  • e6fb0fcb kubectl-ko: add ovs-tracing info
  • 61aa3ba2 pinger: add metrics to resolve external address
  • ef0f3b27 chore: update ovn to 20.06
  • 961f5f1a update changelog
  • 85f2e0e0 fix some version in docs
  • f989bdd8 fix: rename variable
  • 990bf983 fix: minor fix
  • 8d7045b3 feat: use never used address first to reduce conflict
  • db2516c2 ci: use tmpfs to accelerate e2e
  • 79272376 fix: create/delete order might lead ip conflict
  • b27d7545 ci: do not push image when pr
  • a1f53e67 clean up all white noise
  • a4f40370 security: update yum repo
  • 270c825c fix node's annottaions overwrited incorrectly
  • 5adc5a44 Fix typo in multi-nic.md
  • 3ac92a15 Userspace-CNI updates in dpdk.md
  • 76e72b7e Remove empty lines from DPDK Dockerfile
  • 9b5c018a security: update loopback to fix CVE
  • bd1f2acf Make OVS-DPDK start script more robust
  • 3bfc39f8 Reduce DPDK image size
  • 4917afe9 fix: add back privilege for ipv6
  • 8121afd6 Config support for OVS-DPDK
  • ad30e687 security: add trivy scan and fix image CVEs
  • 06256a09 docs: modify arm build
  • 9d2e64a4 docs: update development
  • bd975768 refactor: use ovs.Exec replace raw command
  • 32024ba8 chore: add gosec to audit code security
  • 1db9046d prepare for next release
  • aa72ba6c fix: arm build
  • 628f5c5e fix: change version in install.sh

Contributors

  • Gary
  • Haocheng Liu
  • Mengxin Liu
  • MengxinLiu
  • Patryk Strusiewicz-Surmacki
  • Xiang Dai
  • ckji
  • laik
  • linruichao

v1.2.1 (2020-06-22)

  • 755f57bc release 1.2.1
  • 88b847ca fix: create/delete order might lead ip conflict
  • 0656f63c fix node's annottaions overwrited incorrectly
  • 86e20a09 security: update loopback to fix CVE
  • b1ea8a36 fix: add back privilege for ipv6
  • 2a877530 fix: arm build
  • 8ec2c159 fix: change version in install.sh

Contributors

  • Mengxin Liu
  • MengxinLiu
  • ckji

v1.2.0 (2020-05-30)

  • 280a1bd3 chore: prepare for release 1.2
  • 4342187d chore: prepare for release 1.2
  • 4a52bb43 DPDK doc update and small image reduction
  • b055cc68 Add OVS-DPDK support, for issue 104
  • f7fdd2dc fix: pod get deleted between configure nb and patch pod
  • e13dc5ac fix: native vlan and delete subnet issues
  • 44b5a6a7 fix: trigger github action when dist dir change
  • 3a2ee051 fix: update ovn patch
  • 6e1589cc chore: improve log
  • 00f98489 fix: gc lsp for pod that not alive
  • 701e9efd feat: support underlay without vlan encap
  • 83ad499f chore: optimize kube-ovn-cni log
  • 84b6cdcf fix: gc node lsp
  • 7aafd944 chore: remove vagrant
  • 92ccf729 fix: dst route policy might be empty
  • 6c89a046 feat: in vlan mode if physical gateway exists, no need to create a virtual one
  • 1d5c6958 perf: add amd64 compile flags back
  • b0f0947d fix: init ipam before gc, other wise routes will be deleted
  • dbc23c5e fix: patch ovn to lower src-ip route priority to work with ovn-ic
  • 5a763820 fix: return early if allocation is not ready
  • b03c3768 chore: remove networks crd
  • 2853438c perf: remove more stale lflow
  • 0665f2e8 ci: run ut and e2e in github action
  • e71b68c0 fix: check svc and endpoint protocol
  • 508eb7a2 perf: reduce lflow count
  • 5f8b9b40 fix: when podName or namespace contains dot, lsp cannot be deleted correctly
  • 27c72560 fix: wrong subnet status
  • f0b17a69 feat: change pod route when update gateway type
  • 13283daf feat: refactor subnet and allow cidr change
  • 23821d6c fix: use kubectl to avoid tls handshake error
  • e647cc6c chore: reduce logs
  • aef4336d feat: only show error log of kube-ovn-controller
  • a9ab0bc2 fix: map concurrent panic
  • 2dd13b23 fix: ipv6 related issues
  • 86c443e7 fix: validate if subnet cidr conflicts with svc ip
  • eb4cb1b3 fix: validate if node address conflict with subnet cidr
  • 7f595ee0 feat: github action
  • 1046b572 fix: wait node annotations ready before handle pods
  • 7a0151cc fix: check ovn-nbctl socket in new dir
  • 0dc76768 fix: error log found in scale test
  • 04715943 fix: concurrent panic
  • da14eaeb feat: use bgp to announce pod ip
  • 909b5a00 release 1.1.1
  • ab834b5a fix: labels might be nil
  • 0c0824db fix: ping output format
  • ce27fb31 monitor: make graph more sensitive to changes
  • 9b05fccf docs: update vlan docs
  • d0544d89 docs: update docs
  • 28aef840 feat: improve install/uninstall
  • 8d853656 refactor: refactor cni-server
  • d99ffff0 refactor: controller refactor
  • 8f1f0135 feat: modify install.sh for vlan type network
  • cfe9d276 feat(vlan): vlan network type
  • edd0ea81 feat(vlan): vlan network type
  • c63accf4 fix: yaml indent and ovn central dir
  • 5bc84d7b docs: chinese wechat info
  • feaec4dd fix: fork go-ping and apply patches
  • 58f73b33 chore: update kind node to 1.18 and ginkgo
  • d274a979 docs: add arm build steps
  • d061fc3c fix: mount etc/origin/ovn to ovs-ovn
  • f8d6fd5c add support for multi-arch build
  • 953f5be7 docs: change the cidr to avoid misunderstanding
  • 5c5b9e08 feat: diagnose check if dns/kubernetes svc exist
  • 7c6d6784 OVS local interface table mac_in_use row is lower case, but pod annotation store mac in Upper case.
  • b53a2153 prepare for 1.2
  • 0d60df32 fix: separate log for no address and wrong address
  • a4106b2d docs: format docs

Contributors

  • Gary
  • Mengxin Liu
  • MengxinLiu
  • Yan Zhu
  • fangtian
  • linruichao

v1.1.1 (2020-04-27)

Contributors

  • MengxinLiu

v1.1.0 (2020-04-07)

  • de9b003d release 1.1.0
  • 4511a16b feat: use buildx to reduce image size
  • 370689e7 test: check host route when add/del a subnet
  • 0df863b6 [DO NOT REVIEW] vendor update: introduce klogr and do some tidy
  • eeba4c01 [webhook] init logger for controller-runtime
  • ae187152 test: add node test
  • e1038d22 fix: acl and qos issues
  • a4c81ba7 feat: expose iface in install.sh
  • b6967f57 fix: remove auto checksums
  • dbc85075 perf: offload udp checksum if possible
  • bdb23691 release v1.0.1
  • cdf4de3f perf: add x86 optimization CFLAGS
  • 131181c2 chore: add scripts to build ovs
  • 2b5dd72b fix: lost route when subnet add and is not ready
  • 9032ac84 fix: ip prefix might be empty
  • d1654e15 chore: reduce image size
  • 464e991e chore: modify nodeSelector label to support k8s 1.17
  • 2814a1d5 fix: use ovn-appctl to do recompute
  • 0eaedd99 docs: multi nic
  • dd1923c3 feat: ip cr support multi-nic
  • b2ce6f08 fix: update in svc 1.1.1.1 may del svc 1.1.1.10
  • 20bb7a78 feat: add cni side logical to support ipam for multi-nic
  • 1319eb5d feat: add basic allocation function for multus-cni
  • 8f6997a9 fix: only delete pod that restart policy is Always
  • 3a2de9cd perf: only enqueue updatePod when needed
  • 0f7b9d4c fix: add iptables to accept container traffic
  • bdd021c0 feat: check kube-proxy and coredns in diagnose
  • 502f18cf feat: add label param in install script
  • 5a1cf371 perf: recycle ip and lsp for pod that in failed or succeeded phase
  • d1968584 fix: add inactivity_probe back
  • 417a001b feat: check if crds exist in diagnose
  • e65a9d09 fix: gc static routes
  • 91829d24 fix: still delete lsp if pod not in ipam
  • 7d22430d fix: delete chassis from sb when delete node
  • 5f5df34e fix: missing label selector
  • 9822dba9 feat: add one script installer
  • 479437a3 fix: cleanup in offline environment
  • e707eb96 feat: diagnose check ds/deployment status
  • 3c786f57 refactor: the ipam now has lock itself no need for ippool queue
  • 9211486b fix: if pod is evicted, recycle address
  • 2546deaf fix: use uuid to fetch vip
  • 51f06bd6 refactor ipam
  • 2336dc75 release 1.0.0
  • 7d918f56 refactor pod controller
  • 866db995 merge images into one
  • 8296a9e7 fix:enablebash alias option in Dockerfile CMD scripts
  • 68d87ec2 webhook: use global variables to avoid repeated map constructing
  • cf2784ad remove useless fields in webhook.yaml
  • 657b5a29 remove leader-election for webhook manager
  • 2bcf0d28 feat: update to 20.03.0 ovn

Contributors

  • Bruce Ma
  • MengxinLiu
  • Your Name

v1.0.1 (2020-03-31)

  • 706cdfc3 release v1.0.1
  • a51a672a fix: lost route when subnet add and is not ready
  • 576cf776 fix: ip prefix might be empty
  • 0e1670bf fix: update in svc 1.1.1.1 may del svc 1.1.1.10
  • 63f05e5a fix: add inactivity_probe back
  • bad0c43f fix: use uuid to fetch vip

Contributors

  • MengxinLiu

v1.0.0 (2020-02-27)

  • f40ce553 release 1.0.0
  • 28238794 prepare for 1.0
  • a036b37b fix: add back missing lsp gc
  • 44d53c24 fix: delete lb if it has no backend
  • b8498a83 metrics: expose cni operation metrics
  • a75f9991 refactor: refactor server.go
  • c88221ee fix: disable ovn-nb inactivity_probe
  • 957654f9 fix: wait for container network ready before cni return
  • 870d20b0 refactor: refactor controller.go
  • 2885419d ovn: pick upstream performance patch
  • 11598739 docs: add the development guide and fix the lint
  • 0be25516 docs: add companies using kube-ovn section
  • d56552b8 docs: add community information
  • 8edd0225 fix: alleviate ping lost
  • 632bbc5e refactor: refactor ovn-nbctl.go
  • 8aafa415 docs: modify the readme
  • 60ce7659 fix: pinger percentage error
  • 276a28cf fix: add kube-ovn types to default scheme
  • 998a9e63 refactor: cniserver
  • a5d339b2 docs: update docs
  • dc92afa3 fix: add a periodically recompute to ovn-controller to avoid inconsistency
  • 8488ae2a fix: add timeout to pinger access ovs/ovn
  • ff1ff145 fix: when subnet cidr conflict requeue the subnet
  • e31a08ec fix: add runGateway to wait.Until
  • 18239073 fix: restart nbctl-daemon if not response
  • 839308e0 feat: display controller log in kubectl-ko diagnose
  • 8e6c3d62 refactor: separate normal check and ovn specific check
  • c9783181 fix: do not return not found err
  • f19e5596 fix: move components to kube-system ns and add priorityClass
  • a5d298db feat: cniserver check allocated annotation before configure pod network
  • 8f72b7eb fix: set ovn-openflow-probe-interval
  • 3838a46d pinger: add port binds check between local ovs and ovn-sb
  • f8248cec fix: if cidr block not ends with zero, reformat it
  • dff1d648 fix: resync iptables
  • 40fab55f update version
  • 920053c5 pinger: add timeout for dns resolve
  • 513d2bd9 e2e: add basic framework and tests for e2e

Contributors

  • Bruce Ma
  • Mengxin Liu
  • MengxinLiu
  • withlin

v0.10.2 (2020-01-09)

  • c5f49f24 release 0.10.2
  • 61b7dded fix: add a periodically recompute to ovn-controller to avoid inconsistency
  • 9de9d0b5 fix: when subnet cidr conflict requeue the subnet
  • dca15914 fix: add runGateway to wait.Until
  • f16209b4 fix: restart nbctl-daemon if not response

Contributors

  • Mengxin Liu

v0.10.1 (2020-01-02)

  • 09e27cea release: v0.10.1
  • fafa5607 fix: do not return not found err
  • 858d3331 fix: set ovn-openflow-probe-interval
  • 641d6f86 pinger: add port binds check between local ovs and ovn-sb
  • 8435a335 fix: if cidr block not ends with zero, reformat it
  • 1f5df246 fix: resync iptables

Contributors

  • Mengxin Liu

v0.10.0 (2019-12-23)

  • 9747d540 docs: update changelog
  • adf5071e fix: address in ep might be empty
  • 182bb151 fix: cniserver wait ovs ready
  • 518c0a78 fix: wrong deletion in gc lb and portgroup
  • 2492a166 ovn: add memory patch to slow down memory increase
  • d0bd71fd fix: wait default and node logical switch ready
  • 23cad463 fix: podSelector in networkpolicy should only consider pods in the same ns
  • ca5539f0 fix: do not add unallocated pod to port-group
  • d5ed1ee7 release 0.10.0
  • 3c62ea29 ovn: pick up commit from upstream
  • 4c966c37 feat: pinger support check an address out of cluster.
  • f0096078 chore: double quote shell variables
  • 83364b52 fix: cluster mode db will generate lots listen error log
  • d9e1cd1c fix: gc logical_switch_port form listing pods and nodes
  • a5dc8bb9 fix: some init and cleanup bugs
  • a5eb5e7f fix: ovn-cluster mode
  • a6f0dd14 feat: exclude_ips can be changed dynamically
  • d9c59434 update ovn to 2.12.0-1
  • 06eceb3b feat: use label to select leader to avoid pod status misleading
  • aa53c7dd fix: ip conflict when use ippool
  • 59044330 docs: add v0.9.1 changelog
  • 5efbea9f fix: block subnet deletion when there any ip in use
  • a1dc8c11 plugin: kubectl plugin now expose ovs-vsctl to each node
  • d3c6a71c fix: nbctl need timeout to avoid hang infinitely
  • 77e58903 perf: as lr-route-add with --may-exist will replace exist route, no need for another delete
  • d4a51bdc perf: when controller restart skip pod already create lsp
  • 7617fa79 fix: when delete node recycle related ip/route resource
  • f4e87476 fix typo in start-ovs.sh
  • 9b88e084 perf: skip evicted pod when enqueueAddPod and enqueueUpdatePod
  • e4818624 fix: use ep.subset.port.name to infer target port number
  • 0d8ae20c fix: if no available address delete pod might failed related to #155
  • bbd4257d kind: support reload kube-ovn component in kind cluster
  • d0479e90 perf: filter pod in informer list-watch and disable resync
  • 61a7a7b9 fix: index out of range err when create lsp
  • 623661ef prepare for next release
  • 1643c7f0 kind: support to install kube-ovn in kind
  • 9611599f fix: mount /var/run/netns that kind will use it to store network ns files

Contributors

  • Mengxin Liu
  • qsyqian

v0.9.1 (2019-12-02)

  • 5d4714c1 release v0.9.1
  • 847ef8b0 fix: block subnet deletion when there any ip in use
  • e0fbfea6 fix: nbctl need timeout to avoid hang infinitely
  • dd63c5a4 fix: when delete node recycle related ip/route resource
  • 4d0ad6c7 fix typo in start-ovs.sh
  • 646a177c fix: use ep.subset.port.name to infer target port number
  • 9ae58a81 fix image tag
  • 3b793d4a fix: mount /var/run/netns that kind will use it to store network ns files
  • 093770dd fix: index out of range err when create lsp

Contributors

  • Mengxin Liu
  • qsyqian

v0.9.0 (2019-11-22)

  • 53db261a release: v0.9.0
  • 1984cbe8 feat: when use nodelocaldns do not nat the address
  • 446999f4 docs: add description about relation of cidr and static ip allocation
  • 6f1854f9 Check the short name of kubernetes services which is independant of the cluster domain name.
  • c6f8efeb fix: some grafana modification
  • 40144160 fix: add missing cap
  • 7c464d69 chore: update ovn and other minor fix
  • ac537152 fix re-annotate namespaces when subnet deleted
  • fe2f2612 fix: add ingress_policing_burst to accurate limit ingress bandwidth
  • 20b2c83d fix: network unreachable when add egress qos for pod
  • 758dbc1c fix: err when add egress qos
  • bdfd351d fix: remove privilege=true from long run container
  • 0859da1f perf: optimize pod add
  • 3718851d fix: add keepalive to ovn-controller
  • 6ad98106 feat: add controller metrics
  • b87ed0ee If pod have not a status.PodIP skip add/del static route
  • b9108fba fix: ippool pod static route might lost during leader election
  • a2e24de6 fix: static route might lost during leader election
  • 8202a188 feat: add grafana config and modify metrics.
  • cae0ef27 fix: only keep the last iface-id
  • f3528f23 fix: add missing gc
  • 3791ba29 fix: gc resource when start controller
  • f970615b fix: watch will break if timeout is set
  • ef285b21 feat: pinger add apiserver check metrics
  • d33685e6 fix: avoid conflict when init

Contributors

  • Mengxin Liu
  • QIANSHUANGYANG [钱双洋]
  • Sébastien BERNARD
  • Yan Zhu

v0.8.0 (2019-10-08)

  • 6b57f61b release v0.8.0
  • 6ed722f9 fix: loss might be negative number
  • 7c0517b5 feat: pinger prometheus support
  • e23bd552 feat: support pinger
  • d837aa12 chore: update ovs/ovn
  • 4246cb74 feat: gateway ha
  • e27c9e54 chore: remove ovs-ipsec and update go to 1.13
  • ba3084eb feat: add kubectl plugin
  • 54a465d1 docs: add comparison
  • 38be68d6 fix: pod should be accessed from node when acl applied
  • e62f0ab0 enable portmap by default to support hostport
  • 80de8e58 feat: add port security to pod port
  • 4849f056 feat: add node switch allocated ip cr
  • 34e8406e prepare for next release

Contributors

  • Mengxin Liu
  • MengxinLiu
  • Yan Zhu

v0.7.0 (2019-08-21)

  • 933fd8d2 release: bump v0.7.0
  • 7e2bdf52 fix: add default excludeIps and check kern version
  • 31544abb fix: deal with ipv6 connection str
  • 0f8f2aad fix missing condition when subnet is private
  • d37da1bc add subnet status
  • 4a5c5498 fix: acl related issues
  • 62a395e6 Revert "add subnet status field"
  • b8f1d9ef add missing subnets/status operation permission
  • 6c119ad1 Update cleanup.sh
  • b08ece4f feat: add exclude_ips annotation to namespace
  • a2774ed0 fix: use pg-del to remove pg and acl, check if ports is empty before set pg
  • 422c6dc0 add subnet status
  • fde683ea feat: add subnet annotation to ns and automatically unbind ns from subnet.
  • 948e1306 docs: add cn docs link
  • 5278e105 feat: add default values to subnet
  • ea451a1a write back subnet name to ip label
  • 1c7121db chore: enable mirror in yaml and modify docs
  • db9783a3 fix: duplicate import in network_policy.go
  • 8a57747e fix: improve cni-conf name priority
  • 5f1436be fix: wait subnet ready before start worker.
  • 661387ef fix: check ls exists before handle it
  • 9e05f533 docs: add more installation tools.
  • dccb93c7 docs: add support os and notes.
  • c6a160b3 Update subnet.md
  • 31ad00bd feat: add ip info to ip crd
  • ad7b5c2f feat: update logo
  • 44c3077c feat: add logo
  • 55d7fd6f feat: reserve vport for statefulset pod
  • 7a3c8a6a docs: add crd installation
  • aa016c1b fix: modify default header length
  • 85b40690 fix: do not create exist logical switch
  • 36294366 chore: prepare for next release

Contributors

  • MengxinLiu
  • Yan Zhu
  • ftiannew
  • halfcrazy
  • shuangyang.qian

v0.6.0 (2019-07-22)

  • 463d6253 docs: add crd/ipv6 docs and bump version 0.6.0
  • 103c23af fix build error
  • 9d173ba0 feat: support ipv6-only mode
  • 05566017 add webhook docs
  • 766cec9b add admission webhook for static ip
  • 2abeacb4 docs: add support platform version
  • ed7264ea feat: use subnet crd to manage logical switch
  • 1e5c9f6c Use k8s hostname, fix #60
  • 87367295 fix: remove dependency on cluster-admin
  • e0864a03 chore: use go mod to replace dep
  • 96ec620d docs: update mirror feature to readme
  • 855d834f feat: support traffic mirror
  • d1c3ea85 prepare for next release

Contributors

  • MengxinLiu
  • Yan Zhu

v0.5.0 (2019-06-07)

  • 782e04be chore: bump v0.5.0
  • a27f8339 fix: wrong mtu
  • 44707167 feat: support user define iface and mtu
  • f8d8e186 fix: remove mask field from ip annotation
  • 55090404 feat: auto assign gw for controller config and expose more cmd args
  • 48da0fe1 feat: add pprof and use it as probe
  • 8984c90b feat: set kernel args when start cniserver
  • 208a1dfc feat: support network policy
  • c8d208fb prepare for next release

Contributors

  • MengxinLiu

v0.4.1 (2019-05-27)

  • 5a2cb093 bump version to v0.4.1
  • f8e8b001 fix: manual static ip allocation and automatic allocation should use different ip validation
  • 031924d1 Fix json: cannot unmarshal string into Go value of type request.PodResponse kubeovn#33
  • 24259dbf fix: use ovsdb-client to get leader info
  • 3541b6cf fix: use default-gw as default-exclude-ips and expose args to docs
  • 69c48538 to cleanup all created resources, not only kube-ovn namespace.
  • 9361bb43 prepare for next release

Contributors

  • MengxinLiu
  • Yan Zhu
  • fanbin

v0.4.0 (2019-05-16)

  • 509bf4a4 feat: bump version to 0.4.0
  • 2e414519 feat: support expose pod ip to external network
  • 8992bbe3 fix: check conflict subnet cidr
  • 0f9d1e4b fix: start informer when controller is leader
  • 71c15d65 feat: validate namespace/pod annotations
  • 89491b57 fix: wait node-gw info ready
  • 0d86393d fix: use ovn/ovs-ctl to health check
  • 278ccfe5 feat: remove finalizer dependency improve svc performance
  • 8f962673 fix: reuse node ip and mac annotation
  • b8f85143 Add ha for ovn dbs and simplify makefile
  • 3c617451 feat: merge ovn-nbctl request
  • b5ac7da4 feat: separate ip pool pod and add parallelism to workers
  • ce105dff Mute logrus log for ipset Dont need to change the vendored code.
  • 657470c8 Fix klog cant use V module The side affect of this commit is glog's V module not work.
  • 5429f51b feat: use ovn macam to allocate mac for static ip pod
  • 5a8958cd feat: update ovn to 2.11.1
  • ca036f9e Add vagrantfile
  • 660c0570 fix: use tag version yaml url
  • bc66671c chore: fix go-report golint issues
  • 12a4bec9 ha for kube-ovn-controller
  • b7d0f599 cleanup unused code
  • 756831d7 docs: add network topology
  • c0559487 chore: Minor updates to gateway.md
  • 21e34e9f chore: Gateway documentation touch-ups
  • aa0b2b7c chore: QoS documentation touch-ups
  • 3ec0098a chore: Subnet Isolation documentation touch-ups
  • 524845e9 chore: Static IP documentation touch-up
  • b510016c chore: Subnet documentation touch-ups
  • 524f7d3f chore: Installation Guide touch-ups
  • a1995d03 chore: README touch-up.

Contributors

  • Kai Chen
  • MengxinLiu
  • Yan Zhu

v0.3.0 (2019-04-19)

  • 79c0642e docs: bump version
  • cb2f50da fix: acl rule error
  • 1a6f492a fix: init node gw before run controller
  • 75c514a1 fix: external dns issues
  • 13068892 feat: use daemon ovn-nbctl to improve performance and cleanup unused dns code
  • 24cda418 Implement centralized gateway.
  • 890934f4 chore: migrate from bitbucket to github

Contributors

  • MengxinLiu
  • Yan Zhu

v0.2.0 (2019-04-15)

  • adf655cb remove dns from ls and bump new version
  • ca21c6cb make filter table forward chain default accept
  • cd0ddf10 ipset exclude cluster service ip range
  • 1d753c8e fix: lb bugs
  • cb91d984 read cidr from ns annotation
  • e9998332 fix: remove dns table from nodeswitch and remove unused other_config:namespace
  • 049cab2c fix pod has no ip
  • 170c3c63 Distributed gateway implement
  • cebb8dfd fix: clean lost interface.
  • 4367ba07 feat: support subnet isolation
  • 1fe8c916 feat: support dynamic qos
  • e04bc093 fix: ovn restart issues
  • 014f1dcf fix: ovn restart issues
  • 3e78ddc3 fix: validate namespace switch annotations
  • 44eafc50 fix lint && add docker build
  • cb3e01a4 feat: update yaml, add readiness/liveness probe, add pass shell args
  • 004deefd feat: support qos
  • d37264e4 feat: add simple gateway implementation

Contributors

  • Mengxin Liu
  • MengxinLiu
  • Yan Zhu