v1.11.16 (2024-03-27)

• 6b9e393c set release 1.11.16
• f28babda fix cves
• bc4cf1ae ci: fix memory leak reporting caused by ovn-controller crashes (#3873)
• e7fc6eac Fix the failure to enable multi-network card traffic mirroring for newly created pods (#3805)
• 680ca67c fix incorrect variable assignment (#3787)
• 576866b9 if startOVNIC firstly, and setazName secondly, the ovn-ic-db may sync the old azname (#3762)
• bf36c911 ci: cleanup disk space
• fbbe6e73 Log near err (#3739)
• 08fa8214 ip trigger subnet delete (#3703)
• 65bb2b75 fix some ip can not allocate after released (#3699)
• 1794ab87 Compatible with controller deployment methods before kube-ovn 1.11.16
• d5d4caa4 ovn: do not send direct traffic between lports to conntrack (#3663)
• 6f29efd9 sync master change to 1.11 (#3674)
• 0e98a62d delete cm ovn-ic-config cause crash 1.11 (#3665)
• c0fa3db1 prepare for next release

Contributors

• bobz965
• changluyi
• Changlu Yi
• xieyanker
• zhangzujian
• 张祖建

v1.12.6 (2024-02-26)

• a395104d release v1.12.6
• df6a84aa if startOVNIC firstly, and setazName secondly, the ovn-ic-db may sync the old azname (#3759) (#3763)
• a9065452 modify chart.yaml version
• 0107f9dd add action for build base
• f537002c prepare for next release

Contributors

• changluyi

v1.12.5 (2024-02-21)

• b45c8339 release v1.12.5
• aeeb3c7b ci: bump github actions
• 71e5da7b ci: bump azure/setup-helm to v4.0.0 (#3743)
• 1d544554 base: install libmnl0 instead of libmnl-dev (#3745)
• 669ed067 ci: collect ko logs for all kind clusters (#3744)
• b9224483 ci: fix ovn ic log file name (#3742)
• 5e5fd728 ci: bump kind and node image
• cc8c9ab6 update chart relase action workflow (#3728,#3734,#3691) (#3738)
• b3d8fca7 remove invalid ovs build option (#3733)
• 2aa3311e dpdk: remove unnecessary ovn patch (#3736)
• 8e0e4b17 Fix: Resolve issue with skipped execution of sg annotations (#3700)
• ae895e2e fix: all gw nodes (#3723)
• bffef867 ovn: remove unnecessary patch (#3720)
• 764580fa ci: fix artifact upload
• c71e3949 bump k8s to v1.27.10 (#3693)
• f9c80e12 fix backport (#3697)
• 50b6506d remove unused (#3696)
• a0e3b679 kube-ovn-controller: remove unused codes (#3692)
• 8da2239c remove fip controller (#3684)
• 51a3c1e4 build(deps): bump github.com/osrg/gobgp/v3 from 3.22.0 to 3.23.0 (#3688)
• 6d1cbd3c Compatible with controller deployment methods before kube-ovn 1.11.16 (#3677)
• ea918989 set after genev_sys_6081 started (#3680)
• c16b634e ovn: add nb option version_compatibility (#3671)
• 29587118 Makefile: fix install/upgrade chart (#3678)
• 822df375 ovn: do not send direct traffic between lports to conntrack (#3663)
• 130f06cb ovn-ic-ecmp refactor 1.12 (#3637)
• 8c75820a build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 (#3669)
• 0da94b58 fix 409 (#3662)
• b2f7da5f fix nil pointer (#3661)
• 51e32914 chart: fix parsing image tag when the image url contains a port (#3644)
• a9d896ab ovs: reduce cpu utilization (#3650)
• 2f7fdb29 kube-ovn-monitor and kube-ovn-pinger export pprof path (#3657)
• 62568275 build(deps): bump github.com/onsi/gomega from 1.30.0 to 1.31.0 (#3641)
• 53e712d2 build(deps): bump actions/cache from 3 to 4 (#3643)
• 4dbe9342 build(deps): bump github.com/onsi/ginkgo/v2 from 2.14.0 to 2.15.0 (#3642)
• 141ceaaa SYSCTL_IPV4_IP_NO_PMTU_DISC set default to 0
• 754b172c build(deps): bump github.com/evanphx/json-patch/v5 from 5.7.0 to 5.8.0 (#3628)
• fc988842 chart: fix ovs-ovn upgrade (#3613)
• 216c9292 build(deps): bump github.com/emicklei/go-restful/v3 (#3619)
• 74c5b8a0 build(deps): bump github.com/emicklei/go-restful/v3 (#3606)
• 91be66f1 update policy route when subnet cidr is changed (#3587)
• c3f6e3c2 update ipset to v7.17 (#3601)
• 05d0334e ovs: increase cpu limit to 2 cores (#3530)
• 8f4220c6 build(deps): bump github.com/osrg/gobgp/v3 from 3.21.0 to 3.22.0 (#3603)
• 4b859054 do not count ips in excludeIPs as available and using IPs (#3582)
• f4311ab0 fix security issue (#3588)
• 9f74ee32 ovn0 ipv6 addr gen mode set 0 (#3579)
• 958aab96 fix: add err log (#3572)
• ad3f674a build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 (#3571)
• acb9e97f Makefile: fix kwok installation (#3561)
• db2aeeba fix u2o infinity recycle
• 32604cf1 do not calculate subnet.spec.excludeIPs as availableIPs (#3550)
• 999dc618 add np prefix to networkpolicy name when networkpolicy's name starts with number (#3551)
• 2249e24e fix: apply changes to the latest version (#3514)
• 1b27c414 fix ovn ic not clean lsp and lrp when az name contains "-" (#3541)
• 81ef8ff4 build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#3544)
• cd28464f Revert "ovn-central: check raft inconsistency from nb/sb logs (#3532)"
• e88e5b2b ovn-central: check raft inconsistency from nb/sb logs (#3532)
• 2a499b42 fix chassis gc (#3525)
• f07aef03 prepare for next release

Contributors

• Changlu Yi
• Qinghao Huang
• Zhao Congqi
• bobz965
• changluyi
• dependabot[bot]
• hzma
• zhangzujian
• 张祖建

v1.12.4 (2023-12-14)

• 366e7995 set release v1.12.4
• 4207a45a cni-server: set sysctl variable net.ipv4.ip_no_pmtu_disc to 1 by default (#3504)
• 943a1d99 fix: duplicate gw nodes (#3500)
• 35c7eaf5 add drop invalid rst 1.12 (#3490)
• 60966143 delete String() function (#3488)
• d4adddee fix: lost gc lsp in previous pr (#3493)
• 1d89ea2a fix: ipam clean all pod nic ip address and mac even if just delete a nic (#3453)
• 3903f9b0 fix: check chassis before creation (#3482)
• 621fcad7 build(deps): bump github.com/osrg/gobgp/v3 from 3.20.0 to 3.21.0 (#3481)
• cdd43538 fix ovn eip not calculated (#3477)
• 1476c0a1 fix: calculate subnet before handle finalizer (#3469)
• 739825f1 schedule kube-ovn-controller on the kube-ovn-master node (#3479)
• 768dd5fb delete vm's lsp and release ipam.ip (#3476)
• 03a82bae build(deps): bump github.com/onsi/ginkgo/v2 from 2.13.1 to 2.13.2 (#3475)
• 05149990 build(deps): bump golang.org/x/time from 0.4.0 to 0.5.0 (#3463)
• a45620d8 build(deps): bump golang.org/x/sys (#3464)
• 0fb4f196 kube-ovn-cni: fix pinger result when timeout is reached (#3457)
• df2a9c36 ovs-healthcheck: ignore error when log file does not exist (#3456)
• 7dc00aad ipam: fix duplicate allocation after cidr expansion (#3455)
• 23a4b733 fix e2e install failed
• 72444c11 readd assigned ip addresses to ipam when subnet has been changed (#3448)
• 03ed9daf base: fix missing CFLAGS -fPIC for arm64 (#3428)
• 2f3923c6 fix: multus network status not find dpdk interface name (#3432)
• 5069a03d bump k8s to v1.27.8 (#3425)
• ca41d0f4 ci: fix missing environment variables (#3430)
• c736912b base: fix dpdk build failure (#3426)
• 45e7f1fc base: fix ovn build failure (#3340)
• d6adccad fix: lsp dhcp options set failed when subnet dhcp option is enabled (#3422)
• 6ee914cc trivy: ignore CVE-2023-5528
• 7f5e68c5 update policy route nexthops para
• a54fcfed ci: fix dpdk jobs (#3405)
• 0fe59db4 ci: free disk space for all x86 jobs (#3406)
• 56b31451 ci: free disk space (#3404)
• b0759192 fix dpdk workflow (#3384)
• 459e2d6d base: fix ovn-northd/ovn-controller not creating pidfile in arm64 (#3413)
• 984c0358 support ovn ic ecmp (#3348) (#3410)
• 12625f50 fix kube-ovn-monitor probe (#3409)
• a3c7fb4b fix: wrong usage about DeepEqual (#3396)
• 6d6eef43 subnet support config mtu (#3367)
• 005b92bd fix dualStack network checkgw raise panic (#3392)
• 9f08f4a2 feat: dpdk-22.11.1 support by kube-ovn (#3388)
• 19613311 fix: gc delete multus ip cr and lsp setting when enable keep vm ip (#3378)
• a37ee6bf add kube-ovn-controller nodeAffinity prefer not on ic gateway
• 50c5341c fix: externalID map should not include external_ids (#3385)
• c670082d build(deps): bump github.com/moby/sys/mountinfo from 0.6.2 to 0.7.0
• d271d9e0 build(deps): bump golang.org/x/mod from 0.13.0 to 0.14.0 (#3380)
• f49f84e8 build(deps): bump golang.org/x/time from 0.3.0 to 0.4.0 (#3383)
• dd2af541 build(deps): bump golang.org/x/time from 0.3.0 to 0.4.0 (#3383)
• d683487f prepare for next release

Contributors

• Changlu Yi
• bobz965
• changluyi
• dependabot[bot]
• hzma
• pengbinbin1
• wujixin
• xujunjie-cover
• zhangzujian
• 张祖建
• 袁又袁
• 马洪贞

v1.11.13 (2023-12-14)

• dc24eee7 set release v1.11.13
• 226180e9 cni-server: set sysctl variable net.ipv4.ip_no_pmtu_disc to 1 by default (#3504)
• 57c6a822 typo (#3495)
• aed1be8e add iptables drop invalid rst (#3491)
• 97bfd4c2 delete vm's lsp and release ipam.ip (#3476)
• a5063c80 fix: ipam clean all pod nic ip address and mac even if just delete a nic (#3451)
• 1dd86ea2 ovs-healthcheck: ignore error when log file does not exist (#3456)
• a92c08a9 prepare for the next release

Contributors

• bobz965
• changluyi
• zhangzujian
• 张祖建
• 袁又袁

v1.12.3 (2023-11-06)

• b64d7e9b set release for 1.12.3
• a9cbe027 kube-ovn-dpdk building need its dpdk base img (#3371)
• b0efd5a9 delete check for existing ip cr (#3361)
• 366e6411 fix IP residue after changing subnet of vm in some scenarios (#3370)
• f593a046 sync acp chart (#3364)
• def75169 kube-ovn-controller: fix memory growth caused by unused workqueue
• 3023336d build(deps): bump github.com/osrg/gobgp/v3 from 3.19.0 to 3.20.0 (#3362)
• c7ffd1f5 fix access svc ip failed, when acl is on (#3350)
• 5da74964 Add Layer 2 forwarding for subnet ports again (#3300)
• 31e77fbf add compact for release-1.12 (#3342)
• d771eb8c prepare for next release

Contributors

• Tobias
• bobz965
• changluyi
• dependabot[bot]
• hzma
• 张祖建
• 袁又袁

v1.12.2 (2023-10-24)

• 23a6299c set release 1.12.2
• b4abb34a Nat reuse router port external ip (#3313)
• a0228ef9 dump cpu/mem profile into file on signal SIGUSR1/SIGUSR2 (#3262)
• 5226abf6 kube-ovn-controller: fix ovn ic log directory not mounted to hostpath (#3322)
• c7e6fc34 fix golang lint error (#3323)
• f779892f update go version
• f2eac645 fix build error
• 9375e592 add type assertion for ip crd (#3311)
• 127a87a9 add load balancer health check (#3216)
• e01a8536 build(deps): bump google.golang.org/grpc from 1.58.3 to 1.59.0 (#3310)
• c4e36417 build(deps): bump github.com/Microsoft/hcsshim from 0.11.1 to 0.11.2 (#3309)
• 418d45f1 support vpc configuration of multiple external network segments through label and crd (#3264)
• 51980378 sync subnet to vpc while switching between custom VPC and default VPC (#3218)
• 529c9f4e security: ignore kubectl cve (#3305)
• 29eef277 Don't enqueue VPC update when DeletionTimestamp is zero (#3302)
• 408c6e9e Revert "update base image to ubuntu:23.10 (#3289)"
• 671d55db add base rules for allowing vrrp packets (#3293)
• c6b2cbdd build(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 (#3295)
• c674f489 build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0 (#3296)
• af35954f webhook: fix ip validation when pod is annotated with an ippool name (#3284)
• 94ecdf7a webhook: use dedicated port for health probe (#3285)
• 9cb875a1 add concurrency limiter to ovs-vsctl (#3288)
• 47c4d725 update base image to ubuntu:23.10 (#3289)
• b94667de support custom vpc dns its deployment replicas (#3286)
• fa7eecf9 ovs: load kernel module ip_tables only when it exists (#3281)
• de5860e0 update directory name in charts readme (#3276)
• 481d372e fix ovn build failure (#3275)
• 92654f4e build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 (#3271)
• 1036b0a8 build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 (#3271)
• 3cb084ed build(deps): bump github.com/prometheus/client_golang (#3266)
• 8aaca988 build(deps): bump github.com/prometheus/client_golang (#3266)
• e7a91d0a prepare for the next release
• 9b03b4ad pinger: increase packet send interval (#3259)
• 70a13529 add init container in vpc-nat-gateway statefulset for init (#3254)
• 1156c03d lrp should use chassis name instead of uuid (#3258)

Contributors

• Tobias
• bobz965
• dependabot[bot]
• hzma
• wenwenxiong
• zcq98
• 夜微澜
• 张祖建
• 袁又袁
• 马洪贞

v1.12.1 (2023-09-25)

• e945a106 set release for v1.12.1
• f9adc20a fix: for existing nic, no need to set the port type to internal (#3243)
• e19b5b50 adjust vip prints as ip (#3248)
• 7d3dc037 add dpdk probe (#3151)
• 223cc614 build(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 (#3251)
• 66a2f59b build(deps): bump github.com/Microsoft/hcsshim from 0.11.0 to 0.11.1 (#3245)
• e5f8671b update kubectl to v1.28.2
• 8e27e204 fix goproxy Denial of Service vulnerability (#3240)
• 444b3172 build(deps): bump github.com/cyphar/filepath-securejoin (#3239)
• 55edc1b6 build(deps): bump github.com/onsi/ginkgo/v2 from 2.11.0 to 2.12.1 (#3237)
• 525e3b2d build(deps): bump github.com/docker/docker (#3234)
• de3a300d build(deps): bump github.com/evanphx/json-patch/v5 from 5.6.0 to 5.7.0 (#3235)
• 019217c4 build(deps): bump github.com/osrg/gobgp/v3 from 3.17.0 to 3.18.0 (#3238)
• 62aabb6e build(deps): bump google.golang.org/grpc from 1.57.0 to 1.58.1
• 72b82d06 build(deps): bump github.com/Microsoft/hcsshim from 0.10.0 to 0.11.0 (#3228)
• 20b8ca58 build(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 (#3232)
• 8817e24d chart: remove subnet finalizers before subnets are deleted (#3213)
• 47e80fea kubectl-ko: add new command ovn-trace for tracing ovn lflows only (#3202)
• 0bb52d91 fix conflict after cherry-pick
• 87779e18 add golang lint (#3154)
• 545d64d8 add special handling for the route policy of the default VPC (#3194)
• 3603584c fix add static route to wrong table of ovn (#3195)
• 012e0030 netpol: fix duplicate default drop acl (#3197)
• 1c13e40a add log to help find conflict ip owner (#3191)
• 7f3b1e8b suuport user custom log location (#3186)
• 188c252d enable set --ovn-northd-n-threads (#3150)
• c5d4221f Fix max unavailable (#3149)
• 5d072110 add probe (#3133)
• 0aa39e82 underlay: fix ip/route tranfer when the nic is managed by NetworkManager (#3184)
• 47f475b0 ci: wait for terminating ovs-ovn pod to disappear (#3160)
• 01123f8d fix ovn build (#3166)
• f3b64605 chart: fix ovs-ovn upgrade (#3164)
• ff163558 subnet: fix deleting lr policy on node deletion (#3176)
• 7339b5a5 ci/test: bump various versions (#3162)
• 094d1369 kubectl-ko: get ovn db leaders only on necessary (#3158)
• 1dad23d9 underlay: fix NetworkManager operation (#3147)
• 0e4909a2 Revert "enable set --ovn-northd-n-threads"
• 9fd7ef5e enable set --ovn-northd-n-threads
• 2e820fd8 sbctl chassis operation replace with libovsdb (#3119)
• 00bfa4bd base: remove ovn patch for skipping ct (#3141)
• 377d56dc Enable set probe (#3145)
• a7af8973 support recreate a backup pod with full annotation (#3144)
• 515bdb79 fix ovn nat not clean (#3139)
• f225c66d ovn: do not send direct traffic between lports to conntrack (#3131)
• e5c62d96 delete append externalIds process in initIPAM (#3134)
• bd4d99be add e2e test for ovn db recover (#3118)
• 74f69b27 bump version number
• e1a1b78b docs: updated CHANGELOG.md (#3122)

Contributors

• bobz965
• changluyi
• dependabot[bot]
• github-actions[bot]
• hzma
• 夜微澜
• 张祖建
• 马洪贞

v1.11.11 (2023-09-25)

• a98b4b10 set for release 1.11.11
• 67010837 fix: for existing nic, no need to set the port type to internal (#3243)
• b183e577 undo delete perl cmd to update release-1.11 image
• 634a9951 update kubectl and delete perl (#3223)
• dabea2d9 fix vpc-peer dualstack bug (#3204)
• 0eb4f794 fix ipam random get (#3200)
• a71201a4 fix G101
• 58ebea1d add err log to help find conflict ip owner (#2939)
• 8246b8b7 underlay: fix ip/route tranfer when the nic is managed by NetworkManager (#3184)
• febb78f8 fix ovn build (#3166)
• 0e12c017 chart: fix ovs-ovn upgrade (#3164)
• cb80f8d9 subnet: fix deleting lr policy on node deletion (#3178)
• eb9bcd58 delete append externalIds process in initIPAM (#3134)
• 3ee977a2 move unnecessary init process after startWorkers (#3124)
• 0857593c underlay: fix NetworkManager operation (#3147)
• 132660e8 base: remove ovn patch for skipping ct (#3140)
• 6177d38f delete append externalIds process in initIPAM (#3134)
• 0b305d98 prepare for the next release
• fe4cf9e3 add e2e test for ovn db recover (#3118)
• 89626855 update install.sh

Contributors

• bobz965
• hzma
• 张祖建
• 袁又袁
• 马洪贞

v1.12.0 (2023-08-07)

• 6cf53101 build(deps): bump sigs.k8s.io/controller-runtime from 0.15.0 to 0.15.1 (#3120)
• cd1202ca ovn: fix corrupted database file on start (#3112)
• 02f8c630 some fixes in e2e (#3116)
• d8fa8395 controller: fix vpc update (#3117)
• b5b25ffd increase event burst size (#3115)
• c8031f6e build(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 (#3114)
• 6ba997d2 简化 ovn eip 类型 (#3107)
• a0c5e389 fix u2o policy route allocate too many openflows cause oom (#3099)
• a9fdbf92 Fix relevant annotations are not deleted in hotnoplug nic process (#3108)
• 3c6d6bc0 ovn: delete the db file if the node with new empty db file cannot join cluster for more than 120s (#3101)
• 914bf613 get all chassis once (#3103)
• 42e0574c distinguish nat ip for central subnet with ecmp and active-standby (#3100)
• a27ce4c3 build(deps): bump github.com/osrg/gobgp/v3 from 3.16.0 to 3.17.0 (#3105)
• 68dc1c38 add log near err (#3098)
• c6c472a0 iptables: reject access to invalid service port when kube-proxy works in IPVS mode (#3059)
• f8835ef5 Ovn nat 1 (#3095)
• 5704dae0 skip ok pod (#3090)
• 18580edf ipam: return error for invalid ip range (#3088)
• a7e7a83d some fixes in e2e (#3094)
• 88218743 bug_fix if only one port bind to the sg, then unbind the port to the sg ,it will not enforce in port_group (#3092)
• 4c1161e9 fix .status.default when initializing the default vpc (#3086)
• fa91428b fix repeate set chassis (#3083)
• 68a798f4 build(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0 (#3085)
• da1648cc fix go fmt
• 88b5912f fix kube-ovn-speaker log (#3081)
• 89544c35 remove FOSSA status card
• ac648680 cni-server: fix ovn mappings for vpc nat gateway (#3075)
• 0fe9dcb2 fix kube-ovn-speaker (#3076)
• 827a5a27 build(deps): bump github.com/Microsoft/hcsshim from 0.9.10 to 0.10.0 (#3079)
• 38cd9203 ovn client: fix sb chassis existence check (#3072)
• 038ff7de e2e: fix switch lb rule test (#3071)
• e14ebbd5 bump github.com/docker/docker to v24.0.5 (#3073)
• 90c83057 iptables: add --random-fully to SNAT rules (#3066)
• 1350397e update lint tmeout
• ff6d03d0 build(deps): bump github.com/onsi/gomega from 1.27.9 to 1.27.10 (#3069)
• 76b01496 bump k8s to v1.27.4 (#3063)
• d8e59ab6 e2e: do not import pkg/daemon (#3055)
• 20a6526c build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.9 (#3065)
• af335ba8 build(deps): bump github.com/Microsoft/hcsshim from 0.9.9 to 0.9.10 (#3061)
• 976a32b0 ci: fix multus installation (#3062)
• 0d1599ff add srl connectivity test (#3056)
• 42f35a35 ipam: fix ippool with single dual-stack address (#3054)
• 2ba3b8e5 controller: skip VIP gc if LB not found (#3048)
• 52232b5e keep vm vip when enableKeepVmIP is true (#3053)
• ed58b210 cni: reduce memory usage (#3047)
• 3be1e84c set genev_sys_6081 tx checksum off (#3045)
• 4e761156 fix vpc lb init (#3046)
• f4f80415 custom vpc pod support tcp http probe with tproxy method (#3024)
• 494209d3 change log (#3042)
• b40c35b8 Makefile: add deepflow and kwok installation (#3036)
• 5a0686b2 windows: fix ovn patches (#3035)
• e3b7439d ci: pin go version to 1.20.5 (#3034)
• 97a3e1bc static ip in exclude-ips can be allocated normally when subnet's availableIPs is 0 (#3031)
• 9d88e497 pinger: use fully qualified domain name (#3032)
• f3833f91 feat: suport kubevirt nic hotplug (#3013)
• 62f33289 fix lrp eip not clean (#3026)
• 047af4a2 build(deps): bump helm/kind-action from 1.7.0 to 1.8.0 (#3029)
• e01e616e update maintainer
• ea9c1f1e uninstall.sh: fix ipset name (#3028)
• 9e6dc636 build(deps): bump github.com/docker/docker (#3027)
• 3dd7f4ab replace ovn legacy client with libovsdb (#3018)
• c5bfdb46 install.sh: fix duplicate resources apply (#3023)
• 2e4fb05c build(deps): bump github.com/docker/docker (#3019)
• aefaef5a build(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.2 (#3020)
• 1f1fb82e ovn: fix cluster connections when SSL is enabled (#3001)
• 18560c96 cleanup.sh: wait for provier-networks to be deleted before deleting kube-ovn-cni (#3006)
• 9304ae5a kube-ovn-controller: fix workqueue metrics (#3011)
• d4153885 ci: fix go cache key (#3015)
• 5a5f66eb fix vlan subnet use logical gw can not access outside cluster node (#3007)
• 18fd55dd build(deps): bump github.com/prometheus-community/pro-bing (#3016)
• 269f460d fix vpc already delete while delete policy route (#3005)
• e744d76e make compatible with simplicified enable-eip-snat-cm (#3009)
• 2a652530 build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 (#3012)
• d5f89bce subnet: fix nat outgoing policy rule (#3003)
• 8358a91e build(deps): bump github.com/osrg/gobgp/v3 from 3.15.0 to 3.16.0 (#3010)
• fe924e9f fix subnet finalizer (#3004)
• 12366937 chart: fix readOnly in volumes (#3002)
• d5462b10 libovsdb: various bug fixes (#2998)
• af04530e choose subnet by pod's annotation in networkpolicy (#2987)
• 5c455499 IPPool: fix missing support for CIDR (#2982)
• f2d063a8 kubectl ko performance enhance (#2975)
• d5d196e7 fix deleting old sb chassis for a re-added node (#2989)
• 30cd09e6 add e2e for new ippool feature (#2981)
• 5fdf1f9e underlay: fix NetworkManager syncer for virtual interfaces (#2988)
• 1bb51239 underlay: does not set a device managed to no if it has VLAN managed by NM (#2986)
• 3793e993 build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 (#2985)
• 6a5bfe46 support helm install hybrid_dpdk ovs-ovn (#2980)
• dc40a8cb add unittest for IPAM (#2977)
• daa436d3 IPAM: fix subnet mutex not released when static IP is out of range (#2979)
• 65fd8a4a fix initialization check of vpc nat gateway configuration (#2978)
• e558702d refactor: make qos test cases parallel (#2957)
• 27685a17 IPAM: add support for ippool (#2958)
• 41b4f266 build(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 (#2974)
• 57b01b4a ovn ic support dual (#2970)
• 7a14cf21 base: fix ovn patches (#2971)
• a5194e66 build(deps): bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 (#2968)
• a5e63c72 add detail comment (#2969)
• 13256fab 1. add host multicast perf (#2965)
• 33b6df12 cni-server: reconcile ovn0 routes periodically (#2963)
• e4f68267 uninstall.sh: flush and delete iptables chain OVN-MASQUERADE (#2961)
• 9fbebd34 fix e2e failed (#2960)
• 5de25172 u2o specify u2oip from v1.9 (#2934)
• 30ea6d6c underlay: sync NetworkManager IP config to OVS bridge (#2949)
• 27a2f300 chore: USERS.md (#2955)
• 1c29580e bump k8s version to v1.27.3 (#2953)
• c0730acb ci: fix build-base strategy (#2950)
• f52b1509 e2e: add qos policy test cases (#2924)
• d8739d29 typo (#2952)
• de9c9603 build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 (#2951)
• f4b3c0fe build(deps): bump github.com/prometheus/client_golang (#2948)
• e13c2005 Revert "nm not managed only in the change provide nic name case (#2754)" (#2944)
• 765dc8d7 add permision for test-server.sh (#2942)
• a9d0b4be Kubectl ko diagnose perf (#2915)
• 8f414f72 build(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0 (#2940)
• 88f706e4 controller: fix DHCP MTU when the default network mode is underlay (#2941)
• ea56b560 e2e: fix u2o case (#2931)
• c1c716f1 add err log to help find conflict ip owner (#2939)
• 1f27076f support set the mtu of dhcpv4_options (#2930)
• f1d2011a modify lb-svc dnat port error (#2927)
• d7edac78 fix race condition in gateway check logs (#2928)
• fc7c16ae add subnet.spec.u2oInterconnectionIP (#2921)
• 6105d57b disable ai review
• 8773ea3d e2e: fix waiting deployment to be restarted (#2909)
• 56927913 make conformance with underlay pn vlan subnet has no gw (#2908)
• 0356a63f fix: natgw init check command not work (#2923)
• 3a8e13ee fix issue 2916 (#2917)
• 517d3791 add sync map to fix cocurrent write (#2918)
• dff950b1 cni-server: clear iptables mark before doing masquerade (#2919)
• d043a2d2 build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0 (#2913)
• 525b0b76 build(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8 (#2914)
• 3616d3de For eip created without spec.V4ip this field (#2912)
• ace0b970 match outgoing interface when perform snat (#2911)
• d61a2ad6 libovsdb: ignore not found error when listing objects with a filter (#2900)
• 78f923a9 build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 (#2903)
• 0e27e0ca build(deps): bump github.com/osrg/gobgp/v3 from 3.14.0 to 3.15.0 (#2904)
• fd92c2a8 fix base build
• 668287af fix build base ci
• a1746140 fix build base ci
• 2f52d929 refactor IPAM (#2896)
• db51370f add e2e u2o vpc version check (#2901)
• 6acecb60 kube-ovn-controller: fix subnet update (#2882)
• 35aa8b40 Supporting user-defined kubelet directory (#2893)
• 3883a744 ci: use latest golangci-lint
• efe3ee34 underlay: do not delete patch ports created by ovn-controller (#2851)
• 04c64f0a update pr-review
• aa1ffaa3 auto build base for release branches
• fe4eec77 Add natoutgoing policy rules (#2883)
• bbe04e89 pin golangci-lint version
• 0c5f9055 skip case 'connect to NodePort service with external traffic policy set to Local from other nodes' (#2895)
• 93f027f3 refactor subnet gateway (#2872)
• 33c52623 update webhook check (#2878)
• a123be78 skip pr-review as run out openai quota
• 5c2c9487 skip kubectl cve
• 403c2dcd build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7 (#2890)
• 589d0b6f e2e: multiple external network (#2884)
• 79521c31 build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#2885)
• 71253fe5 fix vip str format (#2879)
• 6b5345ff ci: fix valgrind result analysis (#2853)
• 7c80a135 ovs: fix memory leak in qos (#2871)
• 9f39621a feat: vpc nat gw e2e (#2866)
• e68b983b build(deps): bump github.com/docker/docker (#2875)
• 056b4cf8 fix gc nil pointer (#2858)
• 32b85219 bump k8s to v1.27.2 (#2861)
• a80b3754 add e2e test for slr (#2841)
• 20b20366 Move docs to new website (#2862)
• 24d9dfee build(deps): bump gopkg.in/k8snetworkplumbingwg/multus-cni.v4 (#2860)
• 83a47a73 update dependabot
• d6202bc7 refactor clusterrole for kube-ovn (#2833)
• b1c77ad7 some fixes in CI/e2e (#2856)
• a94fb0b2 manage ovn bfd with libovsdb (#2812)
• d9a038ce update the volumeMounts premission (#2852)
• d642f5b5 fix vip lsp not clean (#2848)
• a1cf2b39 U2o support custom vpc (#2831)
• 2068d879 kubectl-ko: fix trace when u2oInterconnection is enabled (#2836)
• 6ee56d08 ci: detect ovs/ovn memory leak (#2839)
• 77656773 iptables: always do SNAT for access from other nodes to nodeport with external traffic policy set to Local (#2844)
• 175fb262 fix underlay access to node through ovn0 (#2842)
• 98392b3a build(deps): bump github.com/docker/docker (#2843)
• da944a3e adapt vpc dns in master (#2822)
• c7b7a0a5 bump go dependencies (#2820)
• 94d7cc86 fix MTU when subnet is using logical gateway (#2834)
• 486c61ae refactor image builds (#2818)
• a7fd9ddf build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#2832)
• 667f5a7c build(deps): bump github.com/onsi/gomega from 1.27.6 to 1.27.7 (#2830)
• 853abd9d vip support create arp proxy logical switch port (#2817)
• 46bdd01a build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 (#2828)
• e988089e build(deps): bump github.com/docker/docker (#2827)
• 3b8c9edc add route for service ip range when init vpc-nat-gw (#2821)
• 4f015f6d do not allocate MAC address when kube-ovn is called as an IPAM plugin (#2816)
• a30daea4 Iptables nat support share eip (#2805)
• 0466edce fix typos (#2815)
• fca6c9d5 fix some typos (#2814)
• 630104d5 add iperf to test group multicast (#2796)
• 2ba3846b add available check for northd enpoint (#2799)
• 253358ea manage ovn lr static route with libovsdb (#2804)
• 781b47d9 add support of user-defined endpoints to SwitchLBRule (#2777)
• 74221a6e e2e: fix test container not removed (#2800)
• 6ddd03bf manage ovn lr policy with libovsdb (#2788)
• 7350db5f build(deps): bump github.com/docker/distribution (#2797)
• 8f43028a fix handedeletePod repeat 4 times (#2789)
• c8af3dd3 fix cleanup order (#2792)
• b9542ad3 fix missing main route table for the default vpc (#2785)
• 1511573d add ovn DVR fip e2e (#2780)
• 0127e10a build(deps): bump github.com/containernetworking/plugins (#2784)
• 100227be add key lock for more resources (#2781)
• 16db5082 bump cni plugins to v1.3.0 (#2786)
• 08e2e66f replace util.DefaultVpc with c.config.ClusterRouter (#2782)
• e1154acf fix static route recreation after kube-ovn-controller restarts (#2778)
• e7190e6a clean up code about static routes (#2779)
• b1a339b7 Reorder cleanup step by put subnet and vpc to the last to avoid conflict (#2776)
• a2b789cc optimize kube-ovn-controller logic (#2771)
• 3b2b0716 use rate limiting queue with delaying for pod deletion events (#2774)
• 04e4d258 fix underlay subnet kubectl ko trace error (#2773)
• 9b1de481 feat: natgw qos (#2753)
• 11b171e1 build(deps): bump github.com/docker/docker (#2770)
• 62d8122c fix ip statistics in subnet status (#2769)
• d3d01762 informer: wait for cache sync before adding event handlers (#2768)
• a23dd865 build(deps): bump github.com/scylladb/go-set (#2766)
• e2bf60f7 support disable arp check ip conflict in vlan provider network (#2760)
• c55cbd6e replace string map with string set (#2765)
• 99be9cb0 cni-server: wait ovs-vswitchd to be running (#2759)
• 1933ed87 kubectl-ko: support trace for pod with host network (#2761)
• bf1a3d7c libovsdb: fix potential duplicate addresses (#2763)
• 5585d447 ci: run kube-ovn e2e for underlay (#2762)
• cf1748c6 kubectl-ko: fix pod tracing in underlay (#2757)
• 6db99d53 When Subnet spec.vpc is updated, the status in VPC should also be updated. (#2756)
• 328a8911 ovn-nbctl: remove unused functions (#2755)
• 86a07a30 add route table option in static route for subnet (#2748)
• f6414ce1 replace acl/address_set function call with ovnClient (#2648)
• c77f3681 nm not managed only in the change provide nic name case (#2754)
• cc1be3ee support node local dns cache (#2733)
• d7fa2a49 build(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 (#2752)
• faff1e62 build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0 (#2751)
• bdd201b1 update eip qos procees, replace qosLabelEIP with natLabelEip (#2736)
• d1711acd refresh nat gw image before using it (#2743)
• 353df49a build(deps): bump github.com/prometheus/client_golang (#2745)
• 91400ecc Using full repo name to avoid short-name error in podman (#2746)
• fa404a06 build(deps): bump github.com/osrg/gobgp/v3 from 3.13.0 to 3.14.0 (#2738)
• 7eed8341 add policy route when use old active gateway node for centralized subnet (#2722)
• 66615b6d feat: support for multiple external network (#2725)
• f8328bdb build(deps): bump github.com/docker/docker (#2732)
• 6198f691 build(deps): bump github.com/Microsoft/hcsshim from 0.9.8 to 0.9.9 (#2731)
• 2a015e5c base: remove patch for fixing ofpbuf memory leak (#2715)
• a01f9606 fix recover db failed using method in (#2711)
• a6d2a53c refactor: improve performance by using cache (#2713)
• 7dbfd2be For dualstack and ipv6 the default ipv6 range should be same with the ipv4 cidr. (#2708)
• 15780bfb feat: support dynamically changing qos for EIP (#2671)
• d865b48d base: refactor dockerfile (#2696)
• 53bfcf44 kubectl-ko: add support for tracing nodes (#2697)
• f5fee4c9 cni-server: do not perform ipv4 conflict detection during VM live migration (#2693)
• 942b87d1 fix: iptables nat gw e2e not clean sts eth0 net1 ip (#2698)
• 236574c7 Add random fully when nat (#2681)
• 9e3f70c1 replace StrategicMergePatchType with MergePatchType (#2694)
• b59bfd33 ci: fix scheduled vpc nat gateway e2e (#2692)
• d469235f ovn-controller: do not send GARP on localnet for Kube-OVN ports (#2690)
• 7db85edd netpol: fix enqueueing network policy after LSP creation (#2687)
• aba72443 add tcp mem collector (#2683)
• 07a6d4ca fix manifest yamls (#2689)
• 1d6a0fe4 attach node name label in ip cr (#2680)
• 233dc61e adapt ippool annotation (#2678)
• 095dca26 netpol: fix packet drop casued by incorrect address set deletion (#2677)
• 3dc36c8c fix kubectl ko using ovn-central pod that not in a good status (#2676)
• 9c5523f7 add nat gw e2e (#2639)
• a9993dac add workflows for release chart (#2672)
• 4399963e build(deps): bump github.com/Microsoft/go-winio from 0.6.0 to 0.6.1 (#2663)
• d6b0c28d remove auto update k8s and cadvisor
• b57f36ff build(deps): bump k8s.io/sample-controller from 0.26.3 to 0.26.4 (#2675)
• a33adde2 ignore k8s major and minor dependencies as they always break build.
• 68f813e0 rename charts (#2667)
• 933d76e3 ipam update condition refactor (#2651)
• 05e72516 fix LSP existence check (#2657)
• f84343e8 fix network policy issues (#2652)
• 148f1bf4 Resolve SetLoadBalancerAffinityTimeout not being effective (#2647)
• 0b5fc5d3 broadcast free arp when pod is setup (#2638)
• dc31cbd2 delete sync user (#2629)
• 7e872fbe fix: eip qos (#2632)
• ddf28fc2 fix: make webhook port configurable. (#2631)
• c53d58da support ovn ipsec (#2616)
• 53bf75d2 feat: add support for EIP QoS (#2550)
• 1fc5d853 libovsdb: fix race condition in OVN LB operations (#2625)
• cfff2db3 fix IPAM allocation caused by incorrect pod annotations patch (#2624)
• 3e67e893 ci: deploy multus in thick mode (#2628)
• 1caaea2a libovsdb: use monitor_cond as the monitor method (#2627)
• c0ab8351 ci: fix multus installation (#2622)
• 84a910b0 ovs: fix dpif-netlink ofpbuf memory leak (#2620)
• 42a86869 Optimized tolerations code in vpc-nat-gw (#2613)
• 1e8e3828 replace port_group function call with ovnClient (#2608)
• 9b577403 reduce test binary size and add missing webhook build (#2610)
• 949eb8b7 fix: ovneip print column and finalizer (#2593)
• 5babe8e6 add affinity to vpc-nat-gw (#2609)
• 6bf15d4a ci: fix multus installation (#2604)
• 8629d634 update .gitignore (#2600)
• 254598fb bump go modules (#2603)
• 602b1605 build(deps): bump peter-evans/create-pull-request from 4 to 5 (#2606)
• 787616f1 build(deps): bump github.com/docker/docker (#2605)
• 62b8761d build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 (#2607)
• d2523f46 cut invalid OVN_NB_DAEMON to make log more readable (#2601)
• 4c7ddc68 unittest: fix length assertion (#2597)
• 7ba428d7 use copilot to generate pr content
• 1a474fd9 replace lb function call with ovnClient (#2598)
• a73deb47 build(deps): bump github.com/osrg/gobgp/v3 from 3.12.0 to 3.13.0 (#2596)
• 2fb1f95a Merge handleAddPod with handleUpdatePod. (#2563)
• 9399c1e1 fix log (#2586)
• da323a52 fix: ovn snat and fip delete (#2584)
• 048e9315 underlay: get address/route before setting nm managed to no (#2592)
• 5d036cd5 update chart description (#2582)
• 6d50bdc3 iptables: use the same mode with kube-proxy (#2535)
• 09477984 ci: bump kind image to v1.26.3 (#2581)
• 5b7bdccb fix: invalid memory address (#2585)
• cba9c16e kubectl ko change solution to collect logs to path kubectl-ko-log (#2575)
• bb268618 if one item is removed, do not requeue (#2578)
• 5aad7c53 build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6 (#2579)
• a9d66220 fix vpc dns when ovn-default is dualstack (#2576)
• 279717ca move the vpc-nat generic configurations into one single ConfigMap (#2574)
• 887df215 feat: add ovn dnat (#2565)
• 02a86873 Fix kubectl ko log loss when restart deployment or ds (#2531)
• 1d1f5fab add wait until (#2569)
• c0e843fd do no review dependency update
• a7ccd1ae build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 (#2572)
• 5dce9cd2 move ipam.subnet.mutex to caller (#2571)
• 9fba0b54 build(deps): bump sigs.k8s.io/controller-runtime from 0.14.5 to 0.14.6 (#2568)
• 3f7997b3 fix: memory leak in IPAM caused by leftover map keys (#2566)
• 1e9f3529 build(deps): bump github.com/docker/docker (#2567)
• 8e03e97b fix ovn-bridge-mappings deletion (#2564)
• e19620b0 fix lrp deletion after upgrade (#2548)
• ed928348 fix gw label for vpc update field (#2562)
• 642fa92a update CRD in helm chart (#2560)
• 1a41369d fix CRD indent in install.sh (#2559)
• f955143f fix update snat rules not effect correctly (#2554)
• fd6ec3d8 fix go mod list (#2556)
• b4e7e2e8 do not set device unmanaged if NetworkManager is not running (#2549)
• fe1b4ac6 update review bot
• f9eb0ca4 build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5 (#2551)
• 955cf0ff underlay: fix network manager operation (#2546)
• b8fc9d9a controller: fix apiserver connection timeout on startup (#2545)
• 2ae8a9af fix update fip rules not effect correctly (#2540)
• 98dc2f25 fix lsp deletion failure when external-ids:ls is empty (#2544)
• 6b9cdd33 sync parameters to charts from install script (#2526)
• 8c49fc01 underlay: delete altname after renaming the link (#2539)
• 2a81f404 failed to delete ovn-fip or ovn-snat (#2534)
• 17807e55 fix encap_ip will be lost when we restart the ovs-dpdk node (#2543)
• 829e74c2 fix service fail (#2537)
• bd91f8b8 Add speaker param check (#2538)
• 7e6feabe feat: support nic-hotplug to a running pod. (#2521)
• bbe1f3e8 build(deps): bump google.golang.org/grpc from 1.53.0 to 1.54.0 (#2541)
• ae51a656 fix update dnat rules not effect correctly (#2518)
• 569b576a underlay: fix link name exchange (#2516)
• e9710959 add vip to webhook e2e (#2525)
• 30d30bfe fix submariner e2e (#2519)
• 9eda4859 fix lsp gc after upgrade (#2513)
• 0b8964c9 fix: ovn-fip creation failure due to an excessively long label (#2529)
• cc8a11d7 add sleep (#2523)
• 416cc772 when restart deployment kube-ovn-controller the kubectl ko log loss (#2508)
• e7085dec optimize e2e framework (#2492)
• 4b59bdfc fix ovs patches (#2506)
• 1138c2cf fix subnet iprange not correct (#2505)
• 0ebb6785 bump k8s to v1.26.3 (#2514)
• 6fb79923 add kubevirt multus nic lsp before gc process (#2504)
• 3fc6d8e3 update slack link
• 46d9edbd docs: updated CHANGELOG.md (#2515)
• 36329d54 optimize ovs upgrade script (#2512)
• f8aabdf5 ci: change to pull_request_target
• 089d8cd2 ci: add openai to review the code (#2511)
• ee5e59a9 add support of user-defined image name for vpc-dns (#2502)
• 20e70222 build(deps): bump google.golang.org/protobuf from 1.29.1 to 1.30.0 (#2500)
• b6913c52 build(deps): bump github.com/Microsoft/hcsshim from 0.9.7 to 0.9.8 (#2499)
• 443dd58b replace lr/ls/lrp/lsp function call with ovnClient (#2477)
• 599ed234 ci: fix go cache (#2498)
• 0606f90d add skip (#2491)
• 1aff1c4f ensure address label is correct before deleting it (#2487)
• e9dd2892 fix scheduled submariner e2e (#2469)
• c66a93ac build(deps): bump actions/setup-go from 3 to 4 (#2490)
• a8aede74 build(deps): bump github.com/onsi/gomega from 1.27.3 to 1.27.4 (#2489)
• 70a220a0 add some sleep wait iptables clean (#2488)
• 0b8e5346 Add kubectl ko log (#2451)
• c3620cd0 fix: gw configmap may not exist (#2484)
• a31235b1 fix ovs qos e2e for versions prior to v1.12 (#2483)
• 1470c10d add node to addNodeQueue if required annations are missing (#2481)
• 47a70557 Add jitter support to netem qos parameters (#2476)
• b15fc51b build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.29.1 (#2480)
• d1cd3ddd fix ovs-ovn startup/restart (#2467)
• b26784f1 fix changging the stopped vm's subnets, the vm cann't start normally (#2463)
• 7e2e437d build(deps): bump github.com/onsi/gomega from 1.27.2 to 1.27.3 (#2475)
• 5b07ccbb when we delete the pod，it's no need to update the sgs assign to pod (#2465)
• 3fd564b7 fix libovsdb issues (#2462)
• 0689a729 fix ips CR not found due to etcd error (#2472)
• e368a20e wait for subnet lb (#2471)
• 0ecd9aff chore: update base periodically to resolve security issues. (#2470)
• 5387acf4 do not delete external switch if it is created by provider network vlan subnet (#2449)
• 282706d6 add upgrade compatibility (#2468)
• 482167a9 ci: fix ovn-ic installation (#2456)
• 2bce5080 Fixed：Prevents grep from prematurely exiting the shell script if it cannot find a pattern (#2466)
• 4d850e01 add install for webhook (#2460)
• f17b4348 e2e add some debug info and sleep (#2439)
• 8df83cb1 do not set subnet's vlan empty on failure (#2445)
• 7ae8db6c wait subnet lb clear in set subnet EnableLb to false e2e (#2450)
• 674cc290 build(deps): bump github.com/emicklei/go-restful/v3 (#2458)
• e4c089ab ci(Mergify): configuration update (#2457)
• 0444a2b2 kube-ovn-speaker support IPv6/Dual (#2455)
• 790c7cc2 replace nb_global function call with ovnClient (#2454)
• 0d129742 build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0 (#2452)
• b399cca6 fix parsing logical router static routes (#2443)
• 9df323d7 base: fix ovn patches (#2444)
• 3259b912 prepare for libovsdb replacement (#1978)
• d71a314d support auto change external bridge (#2437)
• f4bef89e fix ovn-speaker router bug (#2433)
• 497260ef ovs: change update strategy to RollingUpdate (#2422)
• c84479be add kubevirt install (#2430)
• e9017e2a e2e: wait for subnet to meet specified condition (#2431)
• 810f7b99 delete all invalid ovn lb strategy and prevent invalid multiple endpoint reconsile (#2419)
• 25fef7cc add sumbarier case (#2416)
• a99ceb20 iptables-rules upgrade compatible (#2429)
• 57033847 add log (#2423)
• 824f2e0a check subnet gateway after wait (#2428)
• 86c01e6b fix chart install/upgrade e2e (#2426)
• 322eab3b ci: fix cilium chaining e2e (#2391)
• 79367647 build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0 (#2427)
• dc5148bb resolve e2e error in v1.12.0 (#2425)
• 541b641f update test server and test results (#2421)
• 98050705 Modify the pod scheduling of vpcdns (#2420)
• 83ab70ff e2e: double parallel test nodes in ci (#2411)
• fd3bee6e fix scheduled e2e (#2417)
• 5cd8649b build(deps): bump sigs.k8s.io/controller-runtime from 0.14.4 to 0.14.5 (#2415)
• 68d2ebfa build(deps): bump github.com/osrg/gobgp/v3 from 3.11.0 to 3.12.0 (#2414)
• 8f6c21ce build(deps): bump k8s.io/klog/v2 from 2.90.0 to 2.90.1 (#2413)
• d837d978 bump go modules (#2408)
• 8fbc5dd1 e2e: fix random conflict in parallel processes (#2410)
• cedcbbc8 fix_base_sg_rule (#2401)
• 4a28cfb3 build(deps): bump k8s.io/sample-controller from 0.26.1 to 0.26.2 (#2403)
• d30935e0 build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2 (#2396)
• 645908f6 Support bfd management (#2382)
• b1a09baf remove unused param (#2393)
• d2445519 update ipv6 security-group remote group name (#2389)
• db435dcc Fix routeregexp ipv6 (#2395)
• 8a63d280 ci: fix ref name check (#2390)
• 42e6a302 add support of user-defined kubelet directory (#2388)
• 282644e9 support 1.11 (#2387)
• 2d1c1252 ci: skip netpol e2e automatically for push events (#2379)
• 109704d0 ci: make path filter more accurate (#2381)
• 77022437 build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#2386)
• 9737c390 Fix comment format (#2383)
• 01e55805 fix: ovs-ovn should reboot now (#2297)
• 5e0c305f fix service dual stack add/del cluster ips not change ovn nb (#2367)
• ff836116 ci: fix path filter for windows build (#2378)
• 4f3f4e74 e2e: run specs in parallel (#2375)
• ffbb1524 add base sg rules for ports (#2365)
• db9f9272 accelerate cleanup (#2376)
• 50df652c update ovnnb model (#2371)
• f68044bc docs: updated CHANGELOG.md (#2373)
• 8a1814a8 fix changelog workflow (#2372)
• a1a528b7 build(deps): bump github.com/Microsoft/hcsshim from 0.9.6 to 0.9.7 (#2370)
• ee53dfe1 Add gateway monitor metrics and event (#2345)
• c061ae18 ci: fix default branch test (#2369)
• 4a0829a7 fix github actions workflows (#2363)
• 62834eb1 Fixed iptables creation failure due to an excessively long label (#2366)
• c5d8ebac use existing node switch cidr instead of the configured one (#2359)
• 092aa083 Do not wait pod deletion one by one to accelerate install (#2360)
• 1974f8b1 Change log level (#2362)
• 13f345da change log level (#2356)
• 5bd51760 build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1 (#2357)
• 3b466d2d simplify github actions workflows (#2338)
• 8fe8bc58 update go version to v1.20 (#2312)
• 90f504c7 build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0 (#2353)
• a9753c34 build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0 (#2349)
• 6e21a93e chore: no need to wait 30 seconds before kube-ovn-cni get ready. (#2339)
• f8b97e72 do not remove link local route on ovn0 (#2341)
• 79584c43 fix encap ip when the tunnel interface has multiple addresses (#2340)
• 156d5976 fix legacy network policy err (#2313)
• 9c51bd9e enqueue endpoint when handling service add event (#2337)
• cdf54997 Add neighbor-address format check for kube-ovn-speaker (#2335)
• b0b46948 add ovnext0 inside ns on gw node for ecmp static route with bfd (#2237)
• 4ca994bf OVN LB: add support for SCTP protocol (#2331)
• ea14e91f fix getting service backends in dual-stack clusters (#2323)
• 937d3ced e2e: skip case of switching session affinity (#2328)
• eb2b36a5 fix k8s networking dns e2e (#2325)
• 1c97f58a Add the bgp router-id format check (#2316)
• f7f2375f perform the gateway check but ignore the result when the annotation of subnet is ‘disableGatewayCheck=true’ to make sure of the first network packet (#2290)
• 0bd7c7e5 perf: use empty struct to reduce memory usage (#2327)
• b2eaea00 split netpol cases (#2322)
• 40b5890a feat: support default service session stickiness timeout (#2311)
• 83685b5a feat: configure routes via pod annotation (#2307)
• c8d443ef build(deps): bump github.com/docker/docker (#2320)
• 4e2fe310 e2e: do not test versions prior to 1.11 for ovn-ic update (#2319)
• 0d2aa03c ovndb: use Local_Config to configure listen addresses (#2299)
• 87bacf5f chore: improve the list style in Markdown (#2315)
• 8c1edc80 fix egress node and gateway acl should apply after lb. (#2310)
• 22cc9337 fix kube-ovn-controller crash on startup (#2305)
• b6eb7ce2 build(deps): bump google.golang.org/grpc from 1.52.3 to 1.53.0 (#2308)
• 5ca2a5c8 build(deps): bump golang.org/x/sys from 0.4.0 to 0.5.0 (#2309)
• eb31a178 ignore e2e for subnet enableEcmp before v1.12.0 (#2306)
• f81c43a1 fix u2o code err (#2300)
• 993fefaa set join subnet.spec.enableLb to nil (#2304)
• d1d10972 fix image tag in helm chart (#2302)
• 77cf5e9b update trivy deprecated arg and the ignored CVE. (#2296)
• 9b85bbac move enableEcmp to subnet (#2284)
• 87eacf59 build(deps): bump sigs.k8s.io/controller-runtime from 0.14.3 to 0.14.4 (#2301)
• 971add05 fix gosec ci installation (#2295)
• ac72f771 delete htb qos priority (#2288)
• 36da29cb build(deps): bump sigs.k8s.io/controller-runtime from 0.14.2 to 0.14.3 (#2292)
• ea1df964 ovn northd: fix connection inactivity probe (#2286)
• 54984d67 fix ct new config error (#2289)
• 3f0a5008 fix wrong network interface name in gateway check (#2282)
• 74a7da88 build(deps): bump github.com/docker/docker (#2287)
• 20e57699 Improve webhook (#2278)
• f0d91513 add named port support (#2273)
• 9985ee5c fix access from node to overlay pods when network policy ingress exists (#2279)
• 2b383400 move enableLb to subnet (#2276)
• 5712485d build(deps): bump github.com/osrg/gobgp/v3 from 3.10.0 to 3.11.0 (#2280)
• 805f83ea add V4/V6UsingIPRange and V4/V6AvailableIPRange in subnet status (#2268)
• 0c74034d skip u2o test case before 1.9 (#2274)
• eddf18d8 fix network break on kube-ovn-cni startup (#2272)
• 26c506d8 bump go modules (#2267)
• e10d076e fix setting mtu for ovs internal port (#2247)
• 155768a3 bump ovs/ovn versions (#2254)
• 281242ef use node ip instead of ovn0 ip when accessing overlay pod/svc from host network (#2243)
• ea8523c6 build(deps): bump google.golang.org/grpc from 1.52.1 to 1.52.3 (#2265)
• cb20b12e build(deps): bump google.golang.org/grpc from 1.52.0 to 1.52.1 (#2264)
• 69546ffb build(deps): bump k8s.io/klog/v2 from 2.80.1 to 2.90.0 (#2262)
• 4d9177f7 build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0 (#2263)
• cc4bfd54 build(deps): bump k8s.io/sample-controller from 0.26.0 to 0.26.1 (#2260)
• 8a6ac128 build(deps): bump github.com/docker/docker (#2259)
• b33086f7 egress networkpolicy acl add option apply-after-lb (#2251)
• 625a6854 ovn db: add support for listening on pod ip (#2235)
• 6969dcd8 update cni plugin to 1.2.0 (#2255)
• 1f995709 build(deps): bump github.com/onsi/gomega from 1.24.2 to 1.25.0 (#2257)
• 486e8ee2 clean up legacy u2o implement (#2248)
• 5e684e9d eip status状态切换缓慢 (#2256)
• 1049d245 build(deps): bump github.com/containernetworking/plugins (#2253)
• 9092956f fix vip create (#2245)
• dc731efd improve webhook functions for vpc and subnet (#2241)
• dfb1cc2b fix syntax errors (#2240)
• e6549802 add release-1.11 to scheduled e2e (#2238)
• 6adf8267 fix webhook (#2236)
• 3f5bd39b fix: ovnic del old AZ after establish the new as name (#2229)
• b0c17afd prepare for next release
• 91db26f1 build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 (#2234)

Contributors

• Alex Jones
• bobz965
• changluyi
• Daviddcc
• dependabot[bot]
• fsl
• github-actions[bot]
• gugu
• hzma
• jeffy
• jizhixiang
• KillMaster9
• lanyujie
• liuzhen21
• Longchuanzheng
• lut777
• Miika Petäjäniemi
• mingo
• Nico Wang
• qiutingjun
• Rick
• shane
• wangyd1988
• wujixin
• xujunjie-cover
• 夜微澜
• 张祖建
• 袁又袁

v1.11.10 (2023-08-07)

• 7f111db3 ovn: fix corrupted database file on start (#3112)
• a11d7e92 update version to v1.11.10
• 4b56b637 fix u2o policy route generate too many flow tables cause oom
• 935fa927 distinguish nat ip for central subnet with ecmp and active-standby (#3100)
• 460655c2 bug_fix if only one port bind to the sg, then unbind the port to the sg ,it will not enforce in port_group (#3092)
• 2bd75f0a Revert "fix sg"
• 0400c454 fix sg
• aca169d2 fix .status.default when initializing the default vpc (#3086)
• b2b19014 cni-server: fix ovn mappings for vpc nat gateway (#3075)
• da86070e ovn client: fix sb chassis existence check (#3072)
• 998e857d ci: do not pin go version (#3073)
• 8597b902 ci: fix multus installation (#3062)
• b1717445 ipam: fix ippool with single dual-stack address (#3054)
• c1a8d92a fix vpc lb init (#3046)
• 03f94a52 Revert "prepare for next release"
• 28a4888d set genev_sys_6081 tx checksum off (#3045)
• 6b0cc730 prepare for next release
• 8ce77f85 fix ifname start with pod (#3038)
• a29d00cc static ip in exclude-ips can be allocated normally when subnet's availableIPs is 0 #3031
• 58eef01e ci: pin go version to 1.20.5 (#3034)
• 0f3d599b pinger: use fully qualified domain name (#3032)
• 5400c37d uninstall.sh: fix ipset name (#3028)
• c7918415 kube-ovn-controller: fix workqueue metrics (#3011)
• 54a0b1a6 fix subnet finalizer (#3004)
• f3be5d12 choose subnet by pod's annotation in networkpolicy (#2987)
• 2279f621 kubectl ko performance enhance (#2975) (#2994)
• 572a2e85 fix deleting old sb chassis for a re-added node (#2989)
• abda1560 underlay: fix NetworkManager syncer for virtual interfaces (#2988)
• ec17b735 underlay: does not set a device managed to no if it has VLAN managed by NM (#2986)
• 7db9ff12 bump k8s version to v1.26.6 (#2973)
• cc7768ba base: fix ovn patches (#2972)
• 7829b873 add detail comment
• c84a9748 Kubectl ko diagnose perf release 1.11 (#2967)
• 6325c83e cni-server: reconcile ovn0 routes periodically (#2963)
• 6ea123a7 uninstall.sh: flush and delete iptables chain OVN-MASQUERADE (#2961)
• 738c4078 underlay: sync NetworkManager IP config to OVS bridge (#2949)
• d9bab2e2 typo (#2952)
• b931b5bf Revert "base: fix ovn build failure (#2926)"
• d15874e0 Revert "nm not managed only in the change provide nic name case (#2754)" (#2944)
• 168863cb kubectl ko perf on release-1.11 (#2945)
• ea5f81a7 controller: fix DHCP MTU when the default network mode is underlay (#2941)
• 6d883dc9 support set the mtu of dhcpv4_options (#2930)
• effc1115 u2o support specify u2o ip on release-1.11 (#2937)
• 94859807 modify lb-svc dnat port error (#2927)

Contributors

• bobz965
• changluyi
• hzma
• 张祖建
• 袁又袁

v1.9.28 (2023-08-04)

• b01d68e1 update version to v1.9.28
• 7dcfd171 fix u2o policy route generate too many flow tables cause oom
• ca4b6c3e distinguish nat ip for central subnet with ecmp and active-standby (#3100)
• a91f0a08 fix .status.default when initializing the default vpc (#3086)
• fabbd4b8 ci: do not pin go version (#3073)
• a280123f ci: fix multus installation (#3062)
• 2cdf8fe4 Revert "prepare for release 1.9.28"
• f347bcd0 set genev_sys_6081 tx checksum off (#3045)
• 77eb5694 prepare for release 1.9.28
• 25160ba1 static ip in exclude-ips can be allocated normally when subnet's availableIPs is 0 #3031
• 96613529 ci: pin go version to 1.20.5 (#3034)
• 990d4a7c pinger: use fully qualified domain name (#3032)
• 11ce268e uninstall.sh: fix ipset name (#3028)
• 66d0e439 fix subnet finalizer (#3004)
• 1c9fc6af kubectl ko performance enhance (#2975) (#2992)
• 5292a08c underlay: fix NetworkManager syncer for virtual interfaces (#2988)
• 74c652ee underlay: does not set a device managed to no if it has VLAN managed by NM (#2986)

Contributors

• changluyi
• hzma
• 张祖建
• 马洪贞

v1.9.27 (2023-06-20)

• 48187e49 release 1.9.27
• c41a03a8 add detail comment
• dfe43f9d prepare for next release
• b11c36e3 Kubectl ko diagnose perf release 1.9 (#2964)
• 5995cce9 underlay: sync NetworkManager IP config to OVS bridge (#2949)
• 2dc68307 typo (#2952)
• 265392c4 Revert "nm not managed only in the change provide nic name case (#2754)" (#2944)
• 6d87274e kubectl ko perf on release-1.9 (#2947)
• 110440f5 u2o support specify u2o ip on release-1.9 (#2935)
• 5c855cd6 support tos inherit from inner packet
• e5a13566 underlay: do not delete patch ports created by ovn-controller (#2851)
• 5bb5f45e kubectl-ko: fix trace when u2oInterconnection is enabled (#2836)
• e45a2978 fix underlay access to node through ovn0 (#2847)
• 7e32e57d fix MTU when subnet is using logical gateway (#2834)
• a5a97ce6 prepare for v1.9.26
• bce5b04d fix ip statistics in subnet status (#2769)
• 6b4786b3 add EXCHANGE_LINK_NAME to installation script
• 2dd1bee1 cni-server: wait ovs-vswitchd to be running (#2759)
• 8c158d72 ci: run kube-ovn e2e for underlay (#2762)
• 5eef52ac nm not managed only in the change provide nic name case (#2754)
• 635c57b6 update policy route when change from ecmp to active-standby (#2716)
• af16c760 fix ovn lb gc (#2728)
• 4a4397c7 fix recover db failed using offical doc (#2721)
• 786ec739 bump base image
• 9fe73bd2 base: remove patch for fixing ofpbuf memory leak (#2715)
• 42da9ddd cni-server: do not perform ipv4 conflict detection during VM live migration (#2693)
• e67cfd4c ovn-controller: do not send GARP on localnet for Kube-OVN ports (#2690)
• a4cae607 netpol: fix packet drop casued by incorrect address set deletion (#2677)
• 96580be3 fix pg set port fail when lsp is already deleted
• 905b541d add subnetstatus lock for handleAddOrUpdateSubnet (#2668)
• abed4718 prepare for next release
• b670e1c1 broadcast free arp when pod setup (#2643)
• 1c9e8eac delete sync user (#2629)
• da11ccdc prepare for next release
• c99d9dda ci: deploy multus in thick mode (#2628)
• c8f55f9d libovsdb: use monitor_cond as the monitor method (#2627)
• 9f2e29e1 ovs: fix dpif-netlink ofpbuf memory leak (#2620)
• bd6f1bb2 add debug image
• c3438b48 ci: fix multus installation (#2604)
• e77adbba cut invalid OVN_NB_DAEMON to make log more readable (#2601)
• e54d9904 unittest: fix length assertion (#2597)
• f731350d bump base image
• b95b3395 ci: bump actions/upload-artifact to v3
• dd087cbf security: clear .trivyignore
• f44ec54d underlay: get address/route before setting nm managed to no (#2592)
• 250f3403 ci: bump kind image to v1.26.3 (#2581)

Contributors

• bobz965
• changluyi
• hzma
• yichanglu
• zhangzujian
• 张祖建

v1.11.8 (2023-06-12)

• d15f003a prepare for next release
• 3796d1ef base: fix ovn build failure (#2926)
• 98748f6e bump version number to v1.11.8
• 0a0d254d fix encap_ip will be lost when we restart the ovs-dpdk node (#2543)
• 919c8eeb cni-server: clear iptables mark before doing masquerade (#2919)
• 91b383b0 For eip created without spec.V4ip this field (#2912)
• b8523fc6 match outgoing interface when perform snat (#2911)

Contributors

• 张祖建
• 袁又袁

v1.11.7 (2023-06-05)

• 0b27996b prepare for release 1.11.7
• b6b02458 underlay: do not delete patch ports created by ovn-controller (#2851)
• bed82299 fix gc report error #2886
• 42a5656c add support of user-defined kubelet directory (#2388)
• 4d1b12a8 ci: fix valgrind result analysis (#2853)
• e1b79191 ovs: fix memory leak in qos (#2871)
• 50cc00d0 prepare for next release

Contributors

• zhangzujian
• 夜微澜
• 张祖建
• 马洪贞

v1.11.6 (2023-05-25)

• f071a974 prepare for next release
• 94644e12 u2o support custom vpc release 1.11 (#2849)
• 30f4cc30 kubectl-ko: fix trace when u2oInterconnection is enabled (#2836)
• e50687af ci: detect ovs/ovn memory leak (#2839)
• 767e102a fix underlay access to node through ovn0 (#2846)
• ae226e33 iptables: always do SNAT for access from other nodes to nodeport with external traffic policy set to Local (#2844)
• ef78fee1 delete user tss (#2838)
• 4dd164ac ci: fix no-avx512 image build
• f4033e73 ci: fix kube-ovn-base build
• ea954770 refactor image builds (#2818)
• ddfedfa1 fix MTU when subnet is using logical gateway (#2834)
• 1346b0e7 update vpc dns env value
• 5d8b106a add route for service ip range when init vpc-nat-gw (#2821)
• cd4ff4f6 fix cleanup order (#2792)
• 94e7463e add available check for northd enpoint
• f7a80c90 update release note

Contributors

• changluyi
• hzma
• zhangzujian
• 张祖建
• 马洪贞

v1.11.5 (2023-05-10)

• 632bad30 prepare for release 1.11.5
• bc4637c0 reorder the deletion to avoid dependency conflict
• a8539c57 fix ip statistics in subnet status (#2769)
• 655d5ff2 support disable arp check ip conflict in vlan provider network (#2760)
• a5720d6f cni-server: wait ovs-vswitchd to be running (#2759)
• 8a4e97b5 ci: run kube-ovn e2e for underlay (#2762)
• 87c68683 iptables: use the same mode with kube-proxy (#2758)
• 944f3049 nm not managed only in the change provide nic name case (#2754)
• a55db01d update policy route when change from ecmp to active-standby (#2717)
• ba639824 fix recover db failed using official doc (#2718)
• 81b60ac8 fix_base_sg_rule (#2401)
• e80879c5 add base sg rules for ports (#2365)
• f90aa398 bump base images
• abaee01a base: remove patch for fixing ofpbuf memory leak (#2715)
• 2e800bf2 prepare for release 1.11.4
• 22367be6 cni-server: do not perform ipv4 conflict detection during VM live migration (#2693)
• 49dfd39e fix can not clean the last abandoned snat table (#2701)
• 6ec1982a replace StrategicMergePatchType with MergePatchType (#2694)
• 320f5670 fix build error by partially revert 951f89c5
• d4eabab0 ovn-controller: do not send GARP on localnet for Kube-OVN ports (#2690)
• 951f89c5 adapt ippool annotation (#2678)
• 96e8be6d netpol: fix packet drop casued by incorrect address set deletion (#2677)
• 6b95cecd fix pg set port fail when lsp is already deleted (#2658)
• 5ad2bafe add subnetstatus lock for handleAddOrUpdateSubnet (#2669)
• f314ab58 broadcast free arp when pod setup
• e29fdc96 delete sync user (#2629)
• 621423f7 Add ipsec package to image release 1.11 (#2618)
• 9c80381b ci: deploy multus in thick mode (#2628)
• 2731e8e3 libovsdb: use monitor_cond as the monitor method (#2627)
• 71a8ffe3 ci: fix multus installation (#2622)
• 786fea90 ovs: fix dpif-netlink ofpbuf memory leak (#2620)
• d9647b4d update Dockerfile.debug
• 5b099ed2 ci: fix multus installation (#2604)
• fdc2301b cut invalid OVN_NB_DAEMON to make log more readable (#2601)
• 02b1e140 unittest: fix length assertion (#2597)
• 209246bd bump base image
• d2f1a801 security: remove CVE-2022-29526 from .trivyignore
• 7a69233f base: fix CVE-2022-3294 (#2594)
• ea46479d underlay: get address/route before setting nm managed to no (#2592)
• d67d40d3 base: fix ovs patches (#2590)
• ed14bc2d ci: bump kind image to v1.26.3 (#2581)
• 9c01b1bd move ipam.subnet.mutex to caller (#2571)
• fb70f939 fix: memory leak in IPAM caused by leftover map keys (#2566)
• f4f990b3 fix ovn-bridge-mappings deletion (#2564)
• e4242a01 fix go mod list (#2556)
• 4c08bfe0 do not set device unmanaged if NetworkManager is not running (#2549)
• 39c99c6e fix update dnat rules not effect correctly (#2518)
• 7eb7ed6e underlay: fix network manager operation (#2546)
• 8f67a324 controller: fix apiserver connection timeout on startup (#2545)
• 4b8654db underlay: delete altname after renaming the link (#2539)
• 8d0d56ec underlay: fix link name exchange (#2516)
• f22535e3 fix changging the stopped vm's subnets, the vm cann't start normally (#2463)
• 5bd71ba8 add kubevirt multus nic lsp before gc process (#2504)
• d9ccaf7b update for release v1.11.3

Contributors

• bobz965
• changluyi
• hzma
• yichanglu
• zhangzujian
• 夜微澜
• 张祖建
• 袁又袁
• 马洪贞

v1.11.3 (2023-03-18)

• 9fe900fc prepare for release v1.11.3
• d70bf21f ensure address label is correct before deleting it (#2487)
• df493a8b add node to addNodeQueue if required annations are missing (#2481)
• b4145855 fix ips CR not found due to etcd error (#2472)
• 63afc1f6 ci: fix ovn-ic installation (#2456)
• f790d5a1 do not set subnet's vlan empty on failure (#2445)
• 0ff516bb change cni version from v1.1.1 to v1.2.0
• b0935b7c fix ovn-speaker router bug (#2433)
• 7f6ba2b1 fix chart install/upgrade e2e (#2426)
• e0fe08c5 ci: fix cilium chaining e2e (#2391)
• 365e8f47 Modify the pod scheduling of vpcdns (#2420)
• 13c7319f fix: python package issues
• 7100e157 update ipv6 security-group remote group name (#2389)
• 909c1b6b Fix routeregexp ipv6 (#2395)
• 20cdc9d8 ci: fix ref name check (#2390)
• af25e6ad bump base images
• 064df251 ci: skip netpol e2e automatically for push events (#2379)
• d5005b74 ci: make path filter more accurate (#2381)
• 0f308f34 fix service dual stack add/del cluster ips not change ovn nb
• 4a70baef ci: fix path filter for windows build (#2378)
• 37662226 e2e: run specs in parallel (#2375)

Contributors

• Daviddcc
• KillMaster9
• changluyi
• hzma
• jeffy
• yichanglu
• zhangzujian
• 张祖建

v1.10.10 (2023-03-18)

• 0c5fd63b prepare for release v1.10.10
• 3631e4e4 ensure address label is correct before deleting it (#2487)
• 5ffc237a add node to addNodeQueue if required annations are missing (#2481)
• 2db927ef remove unused subnet status fields (#2482)
• 8d08c629 fix ips CR not found due to etcd error (#2472)
• ec7a3dd5 ci: fix ovn-ic installation (#2456)
• b4383543 do not set subnet's vlan empty on failure (#2445)
• 1c21d6e7 fix: missing import netlink
• a4228c39 change cni version from v1.1.1 to v1.2.0 (#2435)
• 9e363e41 fix ovn-speaker router bug (#2433)
• 45830865 fix ovn-ic e2e
• a1f59628 ci: fix cilium chaining e2e (#2391)
• 8a584a7c fix: python package issues
• 8ec90f57 update ipv6 security-group remote group name (#2389)
• 489d2453 Fix routeregexp ipv6 (#2395)
• 8f045d75 ci: fix ref name check (#2390)
• aec96bf2 bump base images
• 6321f170 ci: skip netpol e2e automatically for push events (#2379)
• b8ad1177 ci: make path filter more accurate (#2381)
• 1bc6c814 ci: fix path filter for windows build (#2378)
• 5c6f394f e2e: run specs in parallel (#2375)
• 437f8dfa fix CVE-2022-41723
• edf17620 ci: fix default branch test (#2369)
• 74f492e9 fix github actions workflows (#2363)
• 9554adfb simplify github actions workflows (#2338)
• b62f472e use existing node switch cidr instead of the configured one (#2359)
• 902b9a35 do not remove link local route on ovn0 (#2341)
• e8f32ac6 fix encap ip when the tunnel interface has multiple addresses (#2340)
• c0c9c71e enqueue endpoint when handling service add event (#2337)
• fe42367a fix getting service backends in dual-stack clusters (#2323)
• 33e6e41f fix github actions workflow
• b2d7f735 prepare for release v1.10.9
• 68b34c91 fix u2o code err
• 138fc5f1 fix kube-ovn-controller crash on startup (#2305)
• 50b0c866 fix gosec ci installation (#2295)
• 50cc03e9 ovn northd: fix connection inactivity probe (#2286)
• 1ba9977a fix ct new config error
• ed53f304 fix network break on kube-ovn-cni startup (#2272)
• e70839b3 fix setting mtu for ovs internal port (#2247)
• 9195dbd3 fix gosec installation
• 2a32c9a4 bump base image version
• 8a532627 fix ovn patches
• 2a4b9805 ovn db: add support for listening on pod ip (#2235)
• 0d88edd6 add enable-metrics arg to disable metrics (#2232)
• 41120b2f fix not building no-avx512 image (#2228)
• 4320301e u2o feature merge to 1.10 (#2227)
• c92af9b9 fix windows build
• 05801fab add release-1.8/1.9/1.10 to scheduled e2e (#2224)
• 267e4aff cni-server: fix waiting for routed annotation (#2225)
• 6a9b2d8a release-1.10: refactor e2e (#2213)
• b2901e8e feature: detect ipv4 address conflict in underlay (#2208)
• 172e1733 set release v1.10.8

Contributors

• Daviddcc
• KillMaster9
• changluyi
• hzma
• zhangzujian
• 张祖建

v1.9.22 (2023-03-16)

• 439e47f8 ensure address label is correct before deleting it (#2487)
• 0f567b44 add node to addNodeQueue if required annations are missing (#2481)
• db313ad1 remove unused subnet status fields (#2482)
• 183e34ff prepare for release v1.9.22
• bfa779dc fix ips CR not found due to etcd error (#2472)
• e06f2b29 ci: fix ovn-ic installation (#2456)
• 694059cc do not set subnet's vlan empty on failure (#2445)
• 00134846 set release v1.9.21
• a1f6a3d3 prepare for release v1.9.21
• 2861d079 fix: missing import netlink
• f1779eec release-1.9 cni version update from v0.9.1 => v1.2.0 (#2434)
• 51105207 fix ovn-speaker router bug (#2433)
• 4cec68c5 fix chart install/upgrade e2e (#2426)
• f2c55a54 ci: fix cilium chaining e2e (#2391)
• 8790b3cc Fix routeregexp ipv6 (#2395)
• dc205246 ci: fix ref name check (#2390)
• 6ce0d02a bump base image
• 551a7140 ovs: fix re-creation of tunnel backing interfaces on restart.
• 0b7e72f8 ci: skip netpol e2e automatically for push events (#2379)
• d2dfd104 e2e: run specs in parallel (#2375)

Contributors

• Daviddcc
• KillMaster9
• changluyi
• zhangzujian
• 张祖建

v1.11.0 (2023-01-09)

• 59bc50f7 feat: add helm upgrade e2e (#2222)
• 25f89737 fix: now route with connected/static will all be sync (#2231)
• c2467d21 add enable-metrics arg to disable metrics (#2232)
• 67024ec5 add u2o test case (#2203)
• f5d80110 add more args to break test server
• f5b9eef8 add release-1.8/1.9/1.10 to scheduled e2e (#2224)
• ab5a2c82 cni-server: fix waiting for routed annotation (#2225)
• 6fd9ea0c build(deps): bump golang.org/x/sys from 0.3.0 to 0.4.0 (#2223)
• cbde65e2 feature: detect ipv4 address conflict in underlay (#2208)
• 64d6f24f fix git ref name in e2e (#2218)
• b0cd45c6 fix e2e for v1.8 (#2216)
• 5843892b some fixes for e2e testing (#2207)
• b6a11789 build(deps): bump github.com/osrg/gobgp/v3 from 3.9.0 to 3.10.0 (#2209)
• 4f08d941 distinguish ippool process for dualstack and normal ippool situation (#2204)
• 098a8212 u2o feature (#2189)
• c0d76fd8 ovn nb and sb can't bind lan ip in ssl (#2200)
• 1489b65c build(deps): bump sigs.k8s.io/controller-runtime from 0.14.0 to 0.14.1 (#2199)
• 16002a28 local ip bind to service (#2195)
• 1407eba2 refactor e2e testing (#2078)
• 86fab667 fix: ovs gc just for pod if (#2187)
• 1a43c6de update docs link in install.sh (#2196)
• 02feb9a9 fix lr policy for default subnet with logical gateway enabled (#2177)
• 3e129fe1 sync delete pod process from release-1.9 (#2190)
• b6e50706 fix: update helm 1.11.0 (#2182)
• 3fb825c8 reserve pod eip static route when update vpc (#2185)
• 159fd9f0 ignore conflict check for pod ip crd (#2188)
• 4d6ad644 remove unused subnet status fields (#2178)
• 484fe97a fix:react leader elect (#2167)
• c914fe78 fix base/windows build (#2172)
• 6a8fc2f3 add metric interface_rx_multicast_packets (#2156)
• 2b5e28ff build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2 (#2168)
• 0992f36f update wechat link
• d45a0440 build(deps): bump github.com/Microsoft/hcsshim from 0.9.5 to 0.9.6 (#2161)
• adecee76 ci: refactor previous push multi arch (#2164)
• 5e4955c9 security: we should check all the vulnerabilities that can be fixed (#2163)
• 502a25bf An error occurred when netpol was added in double-stack mode (#2160)
• dbbbddc1 add process for delete networkpolicy start with number (#2157)
• 26f407fc security remove private key (#2159)
• 57457bd4 add scheduled e2e testing (#2144)
• 5444126a northd: fix race condition in health check (#2154)
• 755a46a6 add check for subnet cidr (#2153)
• c627468a delete nc cmd in image (#2148)
• 207a52cd bump k8s to v1.26 (#2152)
• a4a8b5ad add benchmark test for ipam (#2123)
• 4b1e78c2 update: add YuDong Wang into MAINTAINERS (#2147)
• 39ee1e7c build(deps): bump k8s.io/sample-controller from 0.25.4 to 0.25.5 (#2146)
• 7aa9bdbc delete nc in base image (#2141)
• aab79cb8 update go modules (#2142)
• fa32177d delete ip crd base on podName (#2143)
• 4072eb76 fix vpc spec external not true after init external gw (#2140)
• 51907e02 refactor ipam unit test (#2126)
• ad56e98f build(deps): bump github.com/k8snetworkplumbingwg/network-attachment-definition-client (#2139)
• 012ab59e some optimization for provider network status update (#2135)
• c410d8b4 simplify iptables eip nat (#2137)
• ef4e7555 kind: support to specify api server address/port (#2134)
• 9bbf5e43 kubectl-ko: fix registry/version (#2133)
• 2156ef0d check if subnet cidr is correct (#2136)
• f58c88fc fix: sometimes alloc ipv6 address failed sometimes ipam.GetStaticAddress return NoAvailableAddress (#2132)
• 27d22b7f fix: delete static route should consider dualstack (#2130)
• 9b38bf7f build(deps): bump github.com/osrg/gobgp/v3 from 3.8.0 to 3.9.0 (#2121)
• f9f63cae build(deps): bump github.com/Wifx/gonetworkmanager from 0.4.0 to 0.5.0 (#2122)
• 67b4dc1b build(deps): bump golang.org/x/time from 0.2.0 to 0.3.0 (#2120)
• 78584b7c fix: vlan gw clean in 2 scene (#2117)
• b8e15e19 optimize provider network (#2099)
• 66e96b8e build(deps): bump golang.org/x/sys from 0.2.0 to 0.3.0 (#2119)
• 625e3173 fix removing default static route in default vpc (#2116)
• 141c4c35 fix: eip deletion (#2118)
• 86f75c83 fix: ecmp route keep delete and recreate (#2083)
• 15fd547b fix policy route for subnets with logical gateway (#2108)
• c7549d41 build(deps): bump github.com/emicklei/go-restful/v3 from 3.9.0 to 3.10.1 (#2113)
• c42dae31 refactor function name isIPAssignedToPod to isIPAssignedToOtherPod (#2096)
• c52f384e build(deps): bump github.com/onsi/gomega from 1.24.0 to 1.24.1 (#2111)
• fc80d592 fix: logical gw underlay gw subnet not clean (#2114)
• 5862b020 build(deps): bump github.com/osrg/gobgp/v3 from 3.6.0 to 3.8.0 (#2110)
• 4b4bdb3c build(deps): bump sigs.k8s.io/controller-runtime from 0.12.3 to 0.13.1 (#2109)
• 684d1c75 fix go mod (#2107)
• 8ac8cc4e build(deps): bump github.com/onsi/ginkgo/v2 from 2.3.1 to 2.5.1 (#2103)
• 12f2f404 build(deps): bump k8s.io/sample-controller from 0.24.4 to 0.25.4 (#2101)
• 5caec703 build(deps): bump github.com/Microsoft/go-winio from 0.5.2 to 0.6.0 (#2104)
• e2eae04c build(deps): bump google.golang.org/grpc from 1.49.0 to 1.51.0 (#2102)
• 8f4bf43a build(deps): bump github.com/Microsoft/hcsshim from 0.9.4 to 0.9.5 (#2100)
• 47fe3eef Create dependabot.yml
• 5bed4af1 replace klog.Fatalf with klog.ErrorS and klog.FlushAndExit (#2093)
• 2652bcfe fix: slow vip finalizer operation (#2092)
• 4486e7fe ko-trace: support ARP request/reply (#2046)
• a659f2e5 fix: cni response missing sandbox field (#2089)
• 88500fa5 check if externalIds map is nil when add node as gw for centralized subnet (#2088)
• 47d3872c fix: del createIPS (#2087)
• d1616385 fix: add opts for ips del (#2079)
• 4da9e4e5 fix ovs bridge not deleted cause by port link not found (#2084)
• 7344578e fix libovsdb issues (#2070)
• 9c292c00 ipset: fix unknown ipset data attribute from kernel (#2086)
• def11081 fix: vpc lrp reset after restart kube-ovn-controller (#2074)
• 0c668432 fix: add del bash for redundant ips (#2063)
• 1c334c8d refactor: add unknown config to logic switch port (#2067)
• 419c385b ovs-dpdk supports adding bond for multi-NICs (#2064)
• aef4cd3a fix OVN LS/LB gc (#2069)
• 8aa724eb fix: vip ipam not recover all (#2071)
• 514b7666 bug-fix: make kind-reload invalid (#2068)
• 657dbf60 remove no need params svcasname (#2057)
• 1fcfbc42 Fix:hybrid-dpdk with vxlan tunnel mode，The OVS node does not create a VXLAN tunnel to the OVS-DPDK node (#2065)
• a7ed4429 update ipv6 address for vpc peer (#2060)
• db4fd629 perf: reduce controller init time (#2054)
• 34f42617 reflactor note (#2053)
• b22e66ad fix: replace replace with add to override existing route (#2052)
• c0874158 refactor Makefile (#1901)
• ea22c1ac pass klog verbosity to libovsdb (#2048)
• 8a29023d ovs: fix reaching resubmit limit in underlay (#2038)
• db796b43 sync crd yamls (#2040)
• f8f5a4c3 add helm and e2e test (#2020)
• 5f40c222 fix: add unitest (#2030)
• 68611051 fix: pod not add finalizer after add iptables fip (#2041)
• 75da1603 feat: ovn eip snat fip (#2029)
• 73075605 fix: vpc and vpc nat gw not clean (#2032)
• 79a5ef34 update CHANGELOG.md
• e7fb2089 fix pinger namespace error (#2034)
• 4abd912f iptables: avoid duplicate logging (#2028)
• 3fb645c9 fix: gateway route should stay still when node is pingable (#2011)
• 92b9c8c3 update np name with character prefix (#2024)
• 39497855 bump kind and node image versions (#2023)
• 56992c86 fix ovn nb/sb health check (#2019)
• bf93c458 fix ovs fdb for the local bridge port (#2014)
• 57830154 fix go version
• ad7cfe87 perf: add debug info for perf trace (#2017)
• 16a95836 fix: not append finalizer (#2012)
• 688fd5e2 do not need to delete pg when update networkpolicy (#1959)
• c4d8a2f3 test: add test-server to collect packet lost during upgrade (#2010)
• f89908e7 support create iptables fip and eip automatically if pod enable fip (#1993)
• ab80fd88 ci: upgrade deprecated actions (#2004)
• de5ef511 fix: make ip deletion the same as creation (#2002)
• bfcc952c fix: Add support for Mellanox NIC (#1999)
• f4c977f1 fix: nat gw not enqueue its resources (#1996)
• 32f65f81 fix: delete fiprule failed at first time (#1998)
• eaa936b3 fix typo (#1994)
• dd3790ac feat: now interface for containerd could be inspected (#1987)
• fee5bfd3 fix: snat conntrack race (#1985)
• e1f7d72c add check of write to ovn sb db for ovn-controller (#1989)
• 892aa759 fix grep matching device in routes (#1986)
• 113f62f6 delete pod after TerminationGracePeriodSeconds (#1984)
• 87996f75 ovs: fix waiting flows in underlay networking (#1983)
• eea78886 feature: support default vpc use nat gw pod as cust vpc (#1979)
• 3d2c7a59 ovn db: recover automatically on startup if db corruption is detected (#1980)
• 9ff3b9c0 fix: modify src route priority (#1973)
• 57c75c1e upgrade ovs-ovn pod by generation version instead of chart version (#1960)
• b9e98e52 avoid concurrent subnet status update (#1976)
• ea854d46 fix metrics name (#1977)
• 15f676f6 add vm pod to ipam by ip when initIPAM (#1974)
• afe06d81 validate nbctl socket path in start-controller.sh (#1971)
• 3796a582 skip CVE-2022-3358 (#1972)
• 80aab2ea fix version mismatch between the Ginkgo CLI and the imported package (#1967)
• b7863bdb ovs: fix mac learning in environments with hairpin enabled (#1943)
• 95939ca4 fix: add default deny acl (#1935)
• de3d65c0 Fix registry for ovn-central container in install.sh (#1951)
• c8d22d2c ovs: add fdb update logging (#1941)
• f1f6642b add chart version check when upgrade ovs-ovn pod (#1942)
• 73fde2ce fix underlay e2e testing (#1929)
• 38956b6c set leader flag when get leader (#1939)
• af6973fe set ovsdb-server vlog level to avoid warnings caused by ovs-vsctl (#1937)
• a3292078 fix: UpdateNatRule will error when logicalIP, externalIP is different protocol; replace : to \: when IPv6 in ovs cli.
• 76541ef1 fix: noAllowLiveMigration port can't sync vips (#7)
• 474206be fix: add pod not update vip virtual port
• 596741bc fix: delete chassis (#1927)
• 395a3554 fix: pod mistaken ls label (#1925)
• 797100ed ignore pod without lsp when add pod to port-group (#1924)
• 1a49e738 add network partition check in ovn probes (#1923)
• 16c0ed9f fix: fip unbind can't take effect immediately when conntrack record exists (#1922)
• 606e6f62 No need to change deivceID to sriov_netdevice. (#1904)
• 76dd9afa update ns annotation when subnet cidr changed (#1921)
• 8d1ce420 fix EIP/SNAT on dynamic Pod annotation (#1918)
• 4882c354 fix: eip and nat crd can delete even if nat gw pod deleted and ipatab… (#1917)
• d8886d13 fix missing crd (#1909)
• 8d2991e3 Nat gw support toleration (#1907)
• b3bbe1d4 Update USERS.md (#1908)
• dbe4ebb3 fix typo (#1897)
• 8d15497a fix: Make the /sys directory in ovs-ovn-dpdk pod writable (#1899)
• 5befab46 fix: failed to add eip (#1898)
• 7fae28ae fix: gatewaynode might be null (#1896)
• 57edfe41 ci: increase golangci-lint timeout (#1894)
• 07f12c2d update Go to version 1.19 (#1892)
• e5878ff9 fix: api rollback (#1895)
• 82db50fe ci: use concurrency to ensure that only a single workflow (#1850)
• 83b867ab kubectl-ko: turn off pipefail for ovn leader check (#1891)
• 959a64dc kubectl-ko: fix trace for KubeVirt VM (#1802)
• 10fd3330 fix duplicate logs for leader election (#1886)
• 13ebb855 fix setting ether dst addr for dnat (#1881)
• b1485035 change the prtocol string to const (#1887)
• 7e56931f refactor iptables rules (#1868)
• 14898dd3 cni should handler unmont volume, when delete pod. (#1873)
• 031ed031 delete and recreate netem qos when update process (#1872)
• dedd5aaa feat: check configuration (#1832)
• 97b41127 security: conform to gosec G114 (#1860)
• 2dfb6e72 update CHANGELOG.md
• b6450b2f e2e: add timeout for waiting resources to be ready (#1871)
• e1656752 upgrade to Ginkgo v2 (#1861)
• 0adecb0c feat: reduce downtime by increasing arp cache timeout
• c24f678b feat: reduce wait time by counting the flow num.
• 05611aa7 fix: missing stop_ovn_daemon args
• 6ab837c4 fix: nat gw pod should set default gw to net1 so that to access public (#1864)
• b08765dc delete log severity for drop acl when update networkpolicy (#1863)
• e13c4ef1 ovs: fix log file descriptor leak in monitor process (#1855)
• 8a235e9e fix: dnat port not use whole words to check (#1854)
• 34e02ebb fix ovs-ovn logging (#1848)
• 2a2a32f9 fix ovn dhcp not work with ovs-dpdk (#1853)
• 44e41250 docs: Update USERS.md (#1851)
• 51f491f2 fix: multus macvlan ipvlan use kube-ovn ipam，but ip not inited in init-ipam (#1843)
• 8ef6c01c fix underlay e2e (#1828)
• c33276fd fix arping error log (#1841)
• 69cf5ca5 ko: fix kube-proxy check (#1842)
• 5012ff3e base: use patch from OVN upstream (#1844)
• 07773cb0 ci: switch environment to ubuntu-20.04 (#1838)
• eded5516 ci: split image builds to speed up jobs (#1807)
• 656bd46c ci: update Go cache to speed up jobs (#1829)
• 57d74bff windows: fix ovs/ovn versions and patches (#1830)
• babd8021 修改 ovs-ovn-dpdk 容器镜像编译打包，解决容器中 ovs 运行不正常：无法添加物理网卡，无法创建 vhostuserclient port 问题 (#1831)
• 0ed5c924 support adding routes in underlay Pods for access to overlay Pods (#1762)
• 013549ab update centralized subnet gateway ready patch operation (#1827)
• 9937ef87 remove pod security policy (#1822)
• 725957a7 fix duplicate log for tunnel interface decision (#1823)
• 2e64133c update ovs/ovn version to fix hardware offload (#1821)
• 9c87d9d1 fix: use full longest word to match full ip about dnat (#1825)
• 385064a0 update centralize subnet gatewayNode until gw is ready (#1814)
• 4944db75 initialize IPAM from IP CR with empty PodType for sts Pods (#1812)
• d41c043d feat: add editable ovn-ic (#1795)
• ddcdfb9e kubectl-ko: fix missing env-check (#1804)
• 8b2df588 kubectl-ko: fix destination mac (#1801)
• e8816e96 fix cilium e2e (#1759)
• bc380415 abort kube-ovn-controller on leader change (#1797)
• 26e77ead avoid invalid ovn-nbctl daemon socket path (#1799)
• e7064062 update CHANGELOG.md
• 70f1b141 Perf/memleak (#1791)
• 225da25e delete htb qos when releated annotation is deleted (#1788)
• 8db05a1f Fix nag gw gc (#1783)
• 277f6f69 fix iptables for services with external traffic policy set to Local (#1773)
• 42812b92 perf: reduce metrics labels (#1784)
• 9ffb9d22 northd: remove lookup_arp_ip actions (#1780)
• 9efd4bb2 fix: 5ms is too short for eip and nats creation (#1781)
• 80425b7c Lb-svc supports custom VPCs (#1779)
• cd00ddb6 fix ovnic e2e (#1763)
• 51bf142f fix iptables for service traffic when external traffic policy set to local (#1728)
• 916600f6 set sysctl variables on cni server startup (#1758)
• c10c7118 fix: add omitempty to subnet spec (#1765)
• 2dd46e69 perf: replace jemalloc to reduce memory usage (#1764)
• 35513157 avoid patch interface deletion & recreation during restart (#1741)
• e7ce68bb feature: support exchange link names of OVS bridge and provider nic in underlay networks (#1736)
• 5254731f dpdk-v2 ，--with-hybrid-dpdk 修改 Dockerfile.base-dpdk 解决 编译安装 ovs-dpdk 正常运行 (#1754)
• 3717c6cb fix: Adjust order for Log and output err when get NatRule faild. (#1751)
• f7358337 only support IPv4 snat in vpc-nat-gw when internal subnet is dual (#1747)
• 99c53d29 update README.md
• 7c4293eb docs: update USERS.md (#1743)
• a8ed4bce style: import group ordering. (#1742)
• bcafb10c enqueue subnets after vpc update (#1722)
• 3af85162 do not add subnet not processed by kube-ovn to vpc (#1735)
• 7ac7b592 dpdk-v2 ，--with-hybrid-dpdk qemu 创建 sock 权限问题 (#1739)
• 96683cb1 fix: const extGw may expired, after subnet updated, so use ipam subne… (#1730)
• 861cf05d fix service not working when a node's IPv6 address is before the IPv4 address (#1724)
• daaddba2 update pr template
• ce40f7ed fix: If pod has snat or eip, also need delete staticRoute when delete pod. (#1731)
• 3ff586ec optimize lrp create for subnet in vpc (#1712)
• f582a11b fix: cancel delete staticroute when it's used by NatRule (#1733)
• 3c7588bf fix: wrong info when update subnet from dual to ipv4 or ipv6. (#1726)
• d1b291ed change: add newline at end of file (#1717)
• 26260c91 add kernel prerequisite for Rocky Linux 8.6 (#1713)
• 2fd8e41e Add CODE_STYLE.md (#1711)
• 3b9111f9 Change system-cluster-critical to system-node-critical to prevent pods of DaemonSet type from being (#1709)
• e8877f1d Develop custom vpc-dns (#1662)
• ac01a603 fix CVE-2022-30065 (#1710)
• 4b13888d fix: add and set ENABLE_KEEP_VM_IP=true to keep vm ip (#1702)
• fe18db30 update CHANGELOG.md
• 1ab55056 fix overlay MTU in vxlan/stt tunnels (#1693)
• c9d9923e fix: response has no gw when create nic without default route (#1703)
• b52655fc add note in install.sh for install --with-hybrid-dpdk(dpdk-v2). (#1699)
• 4530a435 ignore ovsdb-server/compact error: not storing a duplicate snapshot (#1691)
• c4e91cbd Get latest vpc data from apiserver instead of cache (#1684)
• 45bc2f7e support kubernetes v1.24 (#1553)
• 48d914e7 update priority range in htb qos (#1688)
• 41bdcd05 fix: clean vip eip snat dant fip in cleanup.sh (#1690)
• c2cea885 update: add Bingbing Zhang into MAINTAINERS (#1687)
• a38dbb5d fix: move away words that is considered offensive after k8s v1.20.0 (#1682)
• 76edad08 update CHANGELOG.md
• e4575c88 add upgrade-ovs script (#1681)
• b3c32210 fix: change ovn-ic static route to policy (#1670)
• db3b9f7f Delete pod if subnet of the pod's owner(sts/vm) updated (#1678)
• 533859fe Develop switch lb rule (#1656)
• 8cb6e36d do not snat packets only for subnets with distributed gateway when external traffic policy is set to local (#1616)
• 86ecfd2d refactor: extract external routes from eip func, make it the same as … (#1671)
• 62ddfda6 add loadbalancer service (#1611)
• b174b4f4 bgp: consolidate service check and use service const (#1674)
• 24786f48 security: disable pprof by default (#1672)
• 3191d8c8 fix bgp: sync service cache (#1673)
• f1226682 fix iptables for direct routing (#1578)
• 2b615f33 feature: support pod use static vip (#1650)
• d6902485 fix: kubectl-ko does't work when ovn-nb, ovn-sb and ovn-northd master slave Switchover (#1669)
• b4f89010 mount modules for auto load ip6tables moudles (#1665)
• 72fccd7e update docs links
• bcec46a3 fix: subnet failed when create without protocol (#1653)
• eddce759 ignore pod not scheduled when reconcile subnet (#1666)
• a158f8d6 fix libovsdb (#1664)
• 200c5317 fix ovs-ovn not running on newly added nodes (#1661)
• 4616285c fix get security group name by external_ids (#1663)
• 993ae20c fix:can not delete pod with sriov vf (#1654)
• 9a180f59 add policy route when add subnet (#1655)
• a93f211f update CHANGELOG.md
• cf1c2017 fix: no need routed when use v1.multus-cni.io/default-network (#1652)
• bcfbe8c6 docs: add GOVERNANCE.md and SECURITY.md
• c2b9eeb4 fix: should go on check ip after occupied ip (#1649)
• 9d0cefb5 set ether dst addr for dnat on logical switch (#1512)
• a9d5e50d docs: update README.md
• d71d1f69 CI: delete resources in order to avoid a long time waiting for subnet deletions. (#1643)
• fe1ebe06 ci: fix golangci-lint (#1639)
• 89514c9c Update install.sh (#1645)
• 4c8c0a39 fix: make sure pod annotation switch is the first choice to allocate ip, and fix vpc nat sts not delete (#1640)
• ae8bc1b4 docs: update docs link
• 0f91a61e set networkpolicy log default to false (#1633)
• 5c857350 update policy route when join subnet cidr changed (#1638)
• 9ac8797b fix: diskfull may lead to wrong raft status for ovs db (#1635)
• 011eba28 ci: update trivy options (#1637)
• 3d82780e fix no interface report to multus cni, missing in k8s.v1.cni.cncf.io/network[s]-status (#1636)
• c953b8f3 change vp gw pod workload from deployment to statefulset (#1630)
• 6238695f increase initial delay of ovs-ovn liveness probe (#1634)
• de99e826 fix: cleanup should ignore patch failed (#1626)
• 8c946a4c delete "allow" policy route on subnet deletion (#1628)
• 75ece0e0 wait ovn-central pods running before delete ovs-ovn pods (#1627)
• f55e32b3 vip, eip support ipv6 vip count (#1624)
• b458bf78 ci: auto changelog now (#1625)
• fce2cf17 get dbstatus for all ovn-central pod (#1619)
• be66af4b refactor: use ConfigMap resourceVersion to check if ovn-vpc-nat-gw-config changed (#1617)
• c54cafa5 fix controller exit before process pod update event (#1621)
• 0ac7e7b9 docs: update ROADMAP.md
• d6915bd6 fix acl log name too long (exceed 63) (#1612)
• 0b840398 docs: Add High-level design of ovn-spekaer (#1609)
• 7ebf36dd docs: Fix allowed subnets (#1610)
• b2f65cd1 add cni log Prevent "for loop time" approximately health check time (#1606)
• 71af9531 docs:Add Usage of ovn-speaker for passivemode and ebgp-multihop (#1605)
• aa456623 update static ip docs (#1607)
• 1400d5b5 Modify the next hop calculation method for kube-ovn-speaker (#1604)
• bc86ec86 fix static ip error in dual stack (#1598)
• 7fdb4bc6 ci: build amd64 images without avx512 (#1584)
• b7453796 Add ebgp-multihop function for kube-ovn-speaker (#1601)
• 6dd2f0ae monitor dns in cilium e2e (#1597)
• 75cfe414 Add passivemode for kube-ovn-speaker (#1600)
• 05bddc6a Bump github.com/emicklei/go-restful/v3 from 3.7.4 to 3.8.0 (#1599)
• 5d54ade9 docs: fix the kind name (#1593)
• 4053d46b Support CNI VESION command (#1596)
• 34dc29d6 update ovs health check, delete connection to ovn sb db (#1588)
• d891a84b fix ovn-ic doc err (#1590)
• 5507440b fix: all cluster pod will be in podadd queue (#1587)
• 990e291e feat: add args for gc/inspect interval (#1572)
• ea2686bf fix: Do not Recreate Logical_Router_Port when Vpc recreated (#1570)
• c651a2fc optimized initialization and gc for the chassis (#1511)
• f5d5b0be fix pod could not be ready (#1562)
• 337f6e05 Fix incorrect usage info of 'argExternalGatewayNet' (#1567)
• d5535f2b fix: delete pod panic when delete vm or statefulset. (#1565)
• a8330506 fix: clean CRDs introduced by new vpc-nat-gateway (#1563)
• fb1f59b1 do not gc vm pod lsp when vm still exists (#1558) (#1561)
• a4c2ef3a do not delete static routes on controller startup (#1560)
• a13cd1e2 update alpine to v3.16 (#1559)
• 8b9138ae fix VPC document (#1554)
• 308e9ecd replace ovn-nbctl daemon with libovsdb in frequent operations (#1544)
• 43483774 fix exec cmd in vpc nat gateway (#1556)
• 5c17eeaf CNI: do not return route if nic is not eth0 (#1555)
• ed8ed00e do not nat packets for incoming traffic when (#1552)
• 8f8734bd add kubeovn 1.9.2 charts (#1539)
• d0d9f4ea fix: opt kubectl-ko install solution (#1550)
• 9d950f67 always set mac address to sriov vf (#1551)
• 4f1e8121 use leases for leader election (#1529)
• ae56306b fix: fix db-check bug (#1541)
• f6b24444 bump version to v1.11.0 (#1545)
• 24791f45 exit kube-ovn-controller on stopped leading (#1536)
• 39e5f0a1 fix: update check script for restart ovs-ovn after rebuild ovsdb (#1534)
• c84a14c6 tmp cancel cilium external svc test (#1531)
• 5d173010 remove name for default drop acl in networkpolicy (#1522)

Contributors

• Alex Jones
• Chris
• Kaihang Zhang
• KillMaster9
• Mengxin Liu
• Money Liu
• Noah
• ShaPoHun
• Usman Malik
• Wang Bo
• Xiaobo Liu
• bobz965
• carezkh
• changluyi
• dependabot[bot]
• fanriming
• gugu
• halfcrazy
• huangsq
• hzma
• jeffy
• long.wang
• lut777
• pengbinbin1
• runzhliu
• shane
• wangyd1988
• xujunjie-cover
• zhouhui-Corigine
• 刘睿华
• 尚墨
• 张祖建
• 袁又袁

v1.10.7 (2022-11-11)

• 6c2ff6ab set release for 1.10.7
• 0b47ca3d fix: Add support for Mellanox NIC (#1999)
• b2cd4df1 fix pinger namespace error (#2034)
• 7e2c3be7 increase action timeout
• 51dbde5e prepare release for 1.10.7
• 2cab58da fix: gateway route should stay still when node is pingable (#2011)
• f2bdb8ea iptables: avoid duplicate logging (#2028)
• d895b766 update np name with character prefix (#2024)
• 3267b0f5 bump kind and node image versions (#2023)
• 5db54e30 fix ovn nb/sb health check (#2019)
• 0633625b fix ovs fdb for the local bridge port (#2014)
• cf1ffcb2 do not need to delete pg when update networkpolicy (#1959)
• 381882c2 ci: upgrade deprecated actions (#2004)
• 071bebc6 fix: make ip deletion the same as creation (#2002)
• 1bf5fa96 fix: delete fiprule failed at first time (#1998)
• 9e51caaa add check of write to ovn sb db for ovn-controller (#1989)
• ce6536a4 fix grep matching device in routes (#1986)
• 14566316 delete pod after TerminationGracePeriodSeconds (#1984)
• 20ed648d ovs: fix waiting flows in underlay networking (#1983)
• 8c9232ce feature: support default vpc use nat gw pod as cust vpc (#1979)
• e7f3fb56 ovn db: recover automatically on startup if db corruption is detected (#1980)
• e430042f fix: modify src route priority (#1973)
• a62e0740 fix CVE-2022-32149
• d433f257 avoid concurrent subnet status update (#1976)
• 9e249b34 upgrade ovs-ovn pod by generation version instead of chart version (#1960)
• 916ae918 fix metrics name (#1977)
• f56bb0b0 add vm pod to ipam by ip when initIPAM (#1974)
• ffa04989 validate nbctl socket path in start-controller.sh
• 21b4b3f8 skip CVE-2022-3358 (#1972)
• 3f836950 use latest base image
• 2a1074e4 fix: add default deny acl (#1935)
• aa716033 ovs: fix mac learning in environments with hairpin enabled (#1943)
• 77c27d4b Fix registry for ovn-central container in install.sh (#1951)
• 1f1e3c28 ovs: add fdb update logging (#1941)
• eeaf796d add chart version check when upgrade ovs-ovn pod
• b0907efc fix underlay e2e testing (#1929)
• 4a80a485 set leader flag when get leader
• 5ef11cb4 set ovsdb-server vlog level to avoid warnings caused by ovs-vsctl (#1937)
• 122041c1 fix: pod mistaken ls label (#1925)
• 8996131a ignore pod without lsp when add pod to port-group
• ee1c306a add network partition check in ovn probes
• efa8f60d update ns annotation when subnet cidr changed (#1921)
• 3e00aa54 fix CVE-2022-27664
• 98f7bc08 fix EIP/SNAT on dynamic Pod annotation (#1918)
• bcaf1e7c fix: eip and nat crd can delete even if nat gw pod deleted and ipatab… (#1917)
• 95ebe009 fix: failed to add eip (#1898)
• 5e06b367 ci: increase golangci-lint timeout (#1894)
• 72a26074 fix: gatewaynode might be null (#1896)
• 5f5e85f6 fix: api rollback
• 63eb2551 fix: diskfull may lead to wrong raft status for ovs db (#1635)
• 2bc4f03e kubectl-ko: turn off pipefail for ovn leader check (#1891)
• ec0f1e4f update dpdk base image
• 503807e3 kubectl-ko: fix trace for KubeVirt VM (#1802)
• f961605a fix duplicate logs for leader election (#1886)
• 88473e63 fix setting ether dst addr for dnat (#1881)
• 704c179e refactor iptables rules (#1868)
• 7f399adf cni should handler unmont volume, when delete pod. (#1873)
• 3e54d9dd delete and recreate netem qos when update process (#1872)
• e52d3476 feat: check configuration (#1832)
• e92c85fa fix: nat gw pod should set default gw to net1 so that to access public (#1864)

Contributors

• Kaihang Zhang
• Mengxin Liu
• Noah
• bobz965
• hzma
• jeffy
• long.wang
• lut777
• runzhliu
• shane
• zhangzujian
• 张祖建
• 马洪贞