kube-ovn

v1.9.14 (2022-11-11)

• 9581d06b set release for 1.9.14
• 6ba9954f fix pinger namespace error (#2034)
• 0c9fd3f0 prepare release for 1.9.14
• 9cbb07a6 fix: gateway route should stay still when node is pingable (#2011)
• ab2a1f12 update np name with character prefix (#2024)
• ec4fe022 bump kind and node image versions (#2023)
• 5f9dca93 fix ovn nb/sb health check (#2019)
• d7e78b8a fix ovs fdb for the local bridge port (#2014)
• d41c467a do not need to delete pg when update networkpolicy (#1959)
• 52310595 add helm and e2e test (#1992)
• 85b8dd66 add check of write to ovn sb db for ovn-controller (#1989)

Contributors

• Noah
• hzma
• lut777
• zhangzujian
• 张祖建

v1.10.6 (2022-08-30)

• 0b9f0c1f set release 1.10.6
• 1510905c feat: reduce downtime by increasing arp cache timeout
• 2b05fd4c feat: reduce wait time by counting the flow num.
• e5378927 fix: missing stop_ovn_daemon args
• 709ede03 delete log severity for drop acl when update networkpolicy
• c1e5be72 refactor: extract external routes from eip func, make it the same as … (#1671)
• 7bcf578e prepare release for 1.10.6
• ed237f9b ovs: fix log file descriptor leak in monitor process (#1855)
• e16667c3 fix ovs-ovn logging (#1848)
• a83ec475 fix: dnat port not use whole words to check (#1854)
• e3b41023 fix ovn dhcp not work with ovs-dpdk (#1853)
• 237e3189 update base image
• 05b27f2d fix: add and set ENABLE_KEEP_VM_IP=true to keep vm ip (#1702)
• a4030de5 fix: multus macvlan ipvlan use kube-ovn ipam，but ip not inited in init-ipam (#1843)
• 80053001 fix underlay e2e (#1828)
• 1a3a1694 fix arping error log (#1841)
• 9447b859 ko: fix kube-proxy check (#1842)
• 774b8d46 base: use patch from OVN upstream (#1844)
• 17d0f5af ci: switch environment to ubuntu-20.04 (#1838)
• 9f0d324a 修改 ovs-ovn-dpdk 容器镜像编译打包，解决容器中 ovs 运行不正常：无法添加物理网卡，无法创建 vhostuserclient port 问题 (#1831)
• 8c533548 windows: fix ovs/ovn versions and patches (#1830)
• d24c5131 update centralized subnet gateway ready patch operation (#1827)
• 02a4caf1 fix duplicate log for tunnel interface decision (#1823)
• b25f58f5 update ovs/ovn version to fix hardware offload (#1821)
• 842d6a34 fix: use full longest word to match full ip about dnat (#1825)
• f12fe0ea update centralize subnet gatewayNode until gw is ready (#1814)
• b9c591f9 initialize IPAM from IP CR with empty PodType for sts Pods (#1812)
• e57021fc kubectl-ko: fix missing env-check (#1804)
• 4c248112 kubectl-ko: fix destination mac (#1801)
• c21c57d1 abort kube-ovn-controller on leader change (#1797)
• d2939e9e avoid invalid ovn-nbctl daemon socket path (#1799)
• aa7b9c8f update vpc-nat-gateway base
• 7674b85f fix: warning for empty chassis fixed (#1787)

Contributors

• bobz965
• hzma
• long.wang
• lut777
• zhangzujian
• 张祖建

v1.9.9 (2022-08-30)

• c4701fd2 set release 1.9.9
• 33d027af feat: reduce downtime by increasing arp cache timeout
• b90769f3 feat: reduce wait time by counting the flow num.
• 2afbe408 fix: missing stop_ovn_daemon args
• 37b9f2f8 delete log severity for drop acl when update networkpolicy
• 82026bbd base: use patch from OVN upstream (#1844)
• f9a2d8de prepare release for 1.9.9
• 7138087c ovs: fix log file descriptor leak in monitor process (#1855)
• c6f9565c fix ovs-ovn logging (#1848)
• b3a6998e fix: add and set ENABLE_KEEP_VM_IP=true to keep vm ip (#1702)
• 20ed2329 fix: multus macvlan ipvlan use kube-ovn ipam，but ip not inited in init-ipam (#1843)
• 4c40a20d fix underlay e2e (#1828)
• eb1706bc fix arping error log (#1841)
• 5757b8ec ko: fix kube-proxy check (#1842)
• 2000e996 ci: switch environment to ubuntu-20.04 (#1838)
• 919bb236 update centralized subnet gateway ready patch operation (#1827)
• 1c3b622c fix duplicate log for tunnel interface decision (#1823)
• e4d53217 update centralize subnet gatewayNode until gw is ready (#1814)
• d44de3e0 initialize IPAM from IP CR with empty PodType for sts Pods (#1812)
• 3eb1d1ad kubectl-ko: fix missing env-check (#1804)
• 5613b63c kubectl-ko: fix destination mac (#1801)
• 1284f15d abort kube-ovn-controller on leader change (#1797)
• 5bf8de0f avoid invalid ovn-nbctl daemon socket path (#1799)
• 4680e632 update vpc-nat-gateway base
• 4cce7870 fix: warning for empty chassis fixed (#1786)

Contributors

• Mengxin Liu
• bobz965
• hzma
• lut777
• zhangzujian
• 张祖建

v1.8.11 (2022-08-30)

• 9f059091 set release 1.8.11
• 5fa2a8e1 feat: reduce downtime by increasing arp cache timeout
• c18cae4e feat: reduce wait time by counting the flow num.
• c8e36b5e fix: missing stop_ovn_daemon args
• e5735c20 delete log severity for drop acl when update networkpolicy (#1862)
• 4bcfb373 prepare release for 1.8.11
• 9d7f0a59 ovs: fix log file descriptor leak in monitor process (#1855)
• 446ee6a2 fix ovs-ovn logging (#1848)
• 63b218c6 fix: multus macvlan ipvlan use kube-ovn ipam，but ip not inited in init-ipam (#1843)
• 95c8ca4f ko: fix kube-proxy check (#1842)
• b7b7d26d avoid patch interface deletion & recreation during restart
• 2746a195 ci: switch environment to ubuntu-20.04 (#1838)
• cacb1ec4 fix base failure
• 3941595b update base image
• 2938daaa fix base build failure
• 122754aa update centralized subnet gateway ready patch operation
• c3f23af3 fix duplicate log for tunnel interface decision (#1823)
• 3d966bff update version to v1.8.10 (#1819)
• dfc89924 do not check static route conflict (#1817)
• a6403f0e update centralize subnet gatewayNode until gw is ready (#1814)
• 7103aae8 initialize IPAM from IP CR with empty PodType for sts Pods (#1812)
• b669c673 abort kube-ovn-controller on leader change (#1797)
• 0e0ea3c7 avoid invalid ovn-nbctl daemon socket path (#1799)
• a7f499dd do not wait dynamic address for pod (#1800)
• 2b34fd58 update vpc-nat-gateway base
• 8d2d0b1e append delete static route for sts pod (#1798)
• 9dc6e15e perf: fix memory leak
• 14beb484 perf: disable mlockall to reduce memory usage
• e6eace89 set sysctl variables on cni server startup (#1758)
• 020b20de fix: add omitempty to subnet spec (#1765)
• 3e77c51c fix CVE-2022-21698
• c5212982 add logrotate for kube-ovn log (#1740)
• ef275cc1 fix: cancel delete staticroute when it's used by NatRule (#1733)
• 513a30b5 fix: wrong info when update subnet from dual to ipv4 or ipv6. (#1726)
• aef889ae Get latest vpc data from apiserver instead of cache (#1684)

Contributors

• Mengxin Liu
• Wang Bo
• bobz965
• hzma
• xujunjie-cover
• zhangzujian
• 张祖建

v1.10.5 (2022-08-10)

• 88531d50 set release v1.10.5
• 97031bdd prepare for release v1.10.5
• 4a34c5dd delete htb qos when releated annotation is deleted (#1788)
• 66643ba3 perf: fix memory leak
• 84aba41f perf: disable mlockall to reduce memory usage
• 35533738 fix iptables for services with external traffic policy set to Local (#1773)
• 32ee00b6 perf: reduce metrics labels (#1784)
• 93e74c60 northd: remove lookup_arp_ip actions (#1780)
• 6c7f45ef fix install error
• 86173506 fix:can not delete pod with sriov vf (#1654)
• dc77ceb3 dpdk-v2 ，--with-hybrid-dpdk 修改 Dockerfile.base-dpdk 解决 编译安装 ovs-dpdk 正常运行 (#1754)
• 7a1795e6 dpdk-v2 ，--with-hybrid-dpdk qemu 创建 sock 权限问题 (#1739)
• 0541ce98 feature: support exchange link names of OVS bridge and provider nic in underlay networks (#1736)
• 4617d7f7 support kubernetes v1.24 (#1761)
• 29f3d6ed use leases for leader election (#1529)
• f02df1a8 fix iptables for service traffic when external traffic policy set to local (#1728)
• 7f256965 set sysctl variables on cni server startup (#1758)
• 47e39fbf fix: add omitempty to subnet spec
• c9ac0cdf perf: replace jemalloc to reduce memory usage
• 7ffa99e3 avoid patch interface deletion & recreation during restart (#1741)
• 8fa4ca49 only support IPv4 snat in vpc-nat-gw when internal subnet is dual (#1747)
• a46b36d9 enqueue subnets after vpc update (#1722)
• 1bf5dc44 do not add subnet not processed by kube-ovn to vpc (#1735)
• 66d8be9f dpdk-v2 ，--with-hybrid-dpdk qemu 创建 sock 权限问题 (#1739)
• e9c27c60 fix: If pod has snat or eip, also need delete staticRoute when delete pod. (#1731)
• 7841f082 optimize lrp create for subnet in vpc (#1712)
• 994885c8 fix: cancel delete staticroute when it's used by NatRule (#1733)
• f9a84588 fix: wrong info when update subnet from dual to ipv4 or ipv6. (#1726)
• 77988f21 fix overlay MTU in vxlan/stt tunnels (#1693)

Contributors

• Mengxin Liu
• hzma
• long.wang
• xujunjie-cover
• zhouhui-Corigine
• 张祖建

v1.9.8 (2022-08-10)

• 686d913c set release v1.9.8
• 8de35693 prepare for release v1.9.8
• 38ee8301 delete htb qos when releated annotation is deleted (#1788)
• 85bd5f94 perf: fix memory leak
• 46c970d6 perf: disable mlockall to reduce memory usage
• d7fd3793 perf: reduce metrics labels (#1784)
• d7a9f5e9 feature: support exchange link names of OVS bridge and provider nic in underlay networks (#1736)
• b966dd59 perf: replace jemalloc to reduce memory usage (#1764)
• 8bb8b173 fix: add omitempty to subnet spec (#1765)
• fd676437 set sysctl variables on cni server startup (#1758)
• 7c6250f3 avoid patch interface deletion & recreation during restart (#1741)
• a91056a3 enqueue subnets after vpc update (#1722)
• e895c5ff do not add subnet not processed by kube-ovn to vpc (#1735)
• f13f3f46 add logrotate for kube-ovn log (#1740)
• 70246fb9 fix: If pod has snat or eip, also need delete staticRoute when delete pod. (#1731)
• 76e3c670 fix iptables for service traffic when external traffic policy set to local(#1725)
• cee39213 optimize lrp create for subnet in vpc (#1712)
• 21f0b979 fix: cancel delete staticroute when it's used by NatRule (#1733)
• 4c2d0c86 fix: wrong info when update subnet from dual to ipv4 or ipv6. (#1726)
• 417176ed fix: new ovn-ic static route method adapted due to old ovn version (#1718)

Contributors

• Mengxin Liu
• hzma
• lut777
• xujunjie-cover
• zhangzujian
• 张祖建

v1.9.7 (2022-07-18)

• eb412c96 set release 1.9.7
• 07bec2a2 prepare for release 1.9.7
• a798a8c2 Get latest vpc data from apiserver instead of cache (#1684)
• 8bc1b169 update priority range in htb qos (#1688)
• ef4673d2 add upgrade-ovs script (#1681)

Contributors

• Mengxin Liu
• Wang Bo
• hzma

v1.10.4 (2022-07-18)

• 1e4a1959 set release 1.10.4
• 0bbcb389 prepare for release 1.10.4
• fb76c58e fix: response has no gw when create nic without default route (#1703)
• 55b3d508 ignore ovsdb-server/compact error: not storing a duplicate snapshot
• b6084777 Get latest vpc data from apiserver instead of cache (#1684)
• f447a1d5 update priority range in htb qos (#1688)
• bdfdc178 fix: clean vip eip snat dant fip in cleanup.sh (#1690)
• 460f930c add upgrade-ovs script (#1681)

Contributors

• Mengxin Liu
• Wang Bo
• bobz965
• hzma
• xujunjie-cover
• zhangzujian

v1.10.3 (2022-07-13)

• f24ed686 set release 1.10.3
• 02d68f7f prepare for release 1.10.3
• 2c989340 fix: change ovn-ic static route to policy (#1670)
• 1596c9ef fix: Do not Recreate Logical_Router_Port when Vpc recreated (#1570)
• db4f5ad0 Delete pod if subnet of the pod's owner(sts/vm) updated (#1678)
• c41897a0 do not snat packets only for subnets with distributed gateway when external traffic policy is set to local (#1616)
• 8190df3b security: disable pprof by default (#1672)
• 761ddcbc bgp: consolidate service check and use service const (#1674)
• 5cffa97d fix bgp: sync service cache (#1673)
• 874785bf fix iptables for direct routing (#1578)
• f3886af7 fix libovsdb (#1664)
• 662dfa64 mount modules for auto load ip6tables moudles (#1665)
• 1efaeb00 ignore pod not scheduled when reconcile subnet (#1666)
• 4409f6c9 fix ovs-ovn not running on newly added nodes (#1661)
• b5025a6a fix get security group name by external_ids (#1663)
• 4afbaf31 add policy route when add subnet (#1655)

Contributors

• Mengxin Liu
• Money Liu
• Wang Bo
• gugu
• hzma
• lut777
• wangyd1988
• 刘睿华
• 张祖建

v1.9.6 (2022-07-13)

• 6db04118 set release 1.9.6
• 885e41f6 prepare for release 1.9.6
• 556a2cf8 shim: fix diffs of commits
• 67da728a fix: change ovn-ic static route to policy (#1670)
• a7a11f03 fix: Do not Recreate Logical_Router_Port when Vpc recreated (#1570)
• e2ab703a feat: vpc peering connection
• 7699a34b Delete pod if subnet of the pod's owner(sts/vm) updated (#1678)
• 02e8973a security: disable pprof by default (#1672)
• 0242b9c2 bgp: consolidate service check and use service const (#1674)
• 3401d933 fix bgp: sync service cache (#1673)
• f818ca5c fix libovsdb (#1664)
• a11feff7 mount modules for auto load ip6tables moudles (#1665)
• 2882cafc ignore pod not scheduled when reconcile subnet (#1666)
• 91dfbbf4 fix get security group name by external_ids (#1663)
• e56d581b add policy route when add subnet

Contributors

• Mengxin Liu
• Money Liu
• Wang Bo
• gugu
• hzma
• lut777
• wangyd1988
• 刘睿华
• 张祖建
• 范日明

v1.8.9 (2022-07-13)

• 9050b22d set release 1.8.9
• c42900d6 prepare for release 1.8.9
• ff928386 [PATCH] Delete pod if subnet of the pod's owner(sts/vm) updated (#1678)
• f216a2f5 security: disable pprof by default (#1672)
• a984c913 update ovs health check, delete connection to ovn sb db (#1588)

Contributors

• Mengxin Liu
• Wang Bo
• hzma

v1.10.2 (2022-06-28)

• b1a17c4a set for release 1.10.2
• 4d229555 fix: no need routed when use v1.multus-cni.io/default-network (#1652)
• 40391a03 prepare for release 1.10.2
• 7c4dfe72 fix: subnet failed when create without protocol
• 4b063242 set ether dst addr for dnat on logical switch (#1512)
• 20222e4f CI: delete resources in order to avoid a long time waiting for subnet deletions. (#1643)
• 35e29e16 ci: fix golangci-lint (#1639)
• 4661b76e fix: cleanup should ignore patch failed (#1626)
• 73a53ba7 fix no interface report to multus cni, missing in k8s.v1.cni.cncf.io/network[s]-status (#1636)
• fe5e020e Update install.sh (#1645)
• bd7ff533 set networkpolicy log default to false (#1633)
• 83c9e845 update policy route when join subnet cidr changed (#1638)
• bcf057d1 ci: update trivy options (#1637)
• f93a5273 increase initial delay of ovs-ovn liveness probe (#1634)
• 1a55ce12 wait ovn-central pods running before delete ovs-ovn pods (#1627)
• f8a266d6 get dbstatus for all ovn-central pod (#1619)
• bc838d5a delete "allow" policy route on subnet deletion (#1628)

Contributors

• Mengxin Liu
• ShaPoHun
• halfcrazy
• hzma
• xujunjie-cover
• zhangzujian
• 张祖建

v1.9.5 (2022-06-28)

• 8a2cc741 set for release 1.9.5
• 9935ab54 fix: no need routed when use v1.multus-cni.io/default-network (#1652)
• 60d33ca9 prepare for release 1.9.5
• a48e64ae CI: delete resources in order to avoid a long time waiting for subnet deletions. (#1643)
• 502a7a00 set networkpolicy log default to false (#1633)
• 0bda2e6f update policy route when join subnet cidr changed (#1638)
• 3cfafe40 ci: update trivy options (#1637)
• 71dba393 increase initial delay of ovs-ovn liveness probe (#1634)
• cf0bbd92 wait ovn-central pods running before delete ovs-ovn pods (#1627)
• 0877c3a7 get dbstatus for all ovn-central pod (#1619)
• 51c409bd fix issues about OVN policy routing
• 637503b4 use policy route instead of static route (#1618)

Contributors

• hzma
• xujunjie-cover
• zhangzujian
• 张祖建

v1.8.8 (2022-06-28)

• 0fbefff5 set release 1.8.8
• 37df8e76 prepare for release 1.8.8
• bf873330 CI: delete resources in order to avoid a long time waiting for subnet deletions. (#1643)
• de117356 add ovn-ic HA deploy
• 1dcf9a43 set networkpolicy log default to false

Contributors

• hzma
• lut777
• 张祖建

v1.10.1 (2022-06-19)

• 4935fa6a monitor dns in cilium e2e (#1597)
• 3dc29041 prepare for release 1.10.1
• e459688e ci: build amd64 images without avx512 (#1584)
• d7144681 update ovs health check, delete connection to ovn sb db (#1588)
• cfbe55e0 fix: all cluster pod will be in podadd queue (#1587)
• 08ba4215 fix pod could not be ready (#1562)
• c453b7ac fix: delete pod panic when delete vm or statefulset. (#1565)
• 77044e3d fix: clean CRDs introduced by new vpc-nat-gateway (#1563)
• e35f90f1 do not gc vm pod lsp when vm still exists (#1558)
• adabd853 do not delete static routes on controller startup (#1560)
• 4348e58f replace ovn-nbctl daemon with libovsdb in frequent operations (#1544)
• 4cacb4b9 fix exec cmd in vpc nat gateway (#1556)
• 0ed681af CNI: do not return route if nic is not eth0 (#1555)
• 96f232d4 do not nat packets for incoming traffic when service externalTrafficPolicy is Local
• bbb8a697 exit kube-ovn-controller on stopped leading (#1536)
• 4b0bd69e tmp cancel cilium external svc test (#1531)

Contributors

• hzma
• lut777
• xujunjie-cover
• zhangzujian
• 刘睿华
• 张祖建

v1.9.4 (2022-06-19)

• c85ab203 ci: disable cilium e2e for release
• 0a841aa1 prepare for release 1.9.4
• f99f4e81 update ovs health check, delete connection to ovn sb db (#1588)
• 82d7dd37 fix: all cluster pod will be in podadd queue (#1587)
• 3c68cb9b fix pod could not be ready (#1562)
• f39ff7a8 fix: delete pod panic when delete vm or statefulset. (#1565)
• 4c60872f fix: keep vm's and statefulset's ips when user specified subnet (#1520)
• 81781a01 do not gc vm pod lsp when vm still exists (#1558)
• 4a28c014 fix exec cmd in vpc nat gateway (#1556)
• 67db2bf3 CNI: do not return route if nic is not eth0 (#1555)
• d5fce51d exit kube-ovn-controller on stopped leading (#1536)
• 05a4b4dc remove name for default drop acl in networkpolicy (#1522)
• 6fcc1975 tmp cancel cilium external svc test (#1531)
• fe3bb3e5 move dumb-init from base images to kube-ovn image

Contributors

• hzma
• lut777
• xujunjie-cover
• 刘睿华
• 张祖建

v1.8.7 (2022-06-19)

• 46987551 prepare for release 1.8.7
• b6796d09 cni handler: do not wait routed annotation for net1 (#1586)
• f5c3ed3f fix adding static route after LSP deletion (#1571)
• f7ee860b fix duplicate netns parameter (#1580)
• 0a3468b1 do not gc vm pod lsp when vm still exists (#1558)
• d453add3 fix exec cmd in vpc nat gateway (#1556)
• 8303ace0 CNI: do not return route if nic is not eth0 (#1555)
• bc758245 exit kube-ovn-controller on stopped leading (#1536)
• c51b09e8 remove name for default drop acl in networkpolicy (#1522)
• 9fe8cfcd move dumb-init from base images to kube-ovn image
• 2a8a45a1 fix defunct ovn-nbctl daemon

Contributors

• hzma
• zhangzujian
• 张祖建

New Feature

• Windows support
• Reduce ovs-ovn restart downtime
• Submariner for multi clusters service
• Iptables eip nats splits
• support to add multiple subnets for a namespace
• add custom ACLs for subnet
• support dpdk hybrid node
• keep ip for kubevirt pod
• Support kubevirt vm live migrate for pod static ip
• feat: support DHCP
• feat: vpc peering connection
• add 'virtual' port for vip
• LSP forwarding external Layer-2 packets
• update provider network via node annotation
• feat: add webhook to check subnet deletion
• add webhook validate the vpc resource whether it can be deleted.

Performance

• optimize ovs request in cni
• optimize node port-group check
• optimize IPAM initialization
• manual compile method for ubuntu20.04
• add repo for tunning packages
• add kube-ovn-controller switch for EIP and SNAT
• use router policy for distributed/centralized gateway

Security

• update alpine to fix CVE-2022-1271

Monitoring

• Add env-check
• add sb/nb db check bash script
• update nodeips for restore cmd in ko plugin
• add restore process for ovn nb db
• add reset porocess for ovs interface metrics
• add metric for ovn nb/sb db status

Bugfix

• fix defunct ovn-nbctl daemon
• keep vm's and statefulset's ips when user specified subnet
• add netem qos when create pod
• handle the case of error node cidr
• ovs trace flow always ends with controller action
• add empty chassis check in ovn db
• delete ipam record when gc lsp
• fix wrong vpc-nat-gateway arm image
• fix pod annotation may override by patch
• fix: workqueue_depth should show count not rate
• add delete ovs pods after restore nb db
• delete monitor noexecute toleration
• fix routes for packets from Pods to other nodes
• masquerade packets from Pods to service IP
• modify init ipam by ip crd only for sts pod
• fix adding key to delete Pod queue
• fix IPAM initialization
• ignore all link local unicast addresses/routes
• fix error handling for netlink.AddrDel
• fix provider-networks status
• recover ips CR on IPAM initialization
• fix: do not recreate port for terminating pods
• avoid frequent ipset update
• add reset for kube-ovn-monitor metrics
• fix: The underlay physical gateway config by external-gw-addr when use snat&eip
• fix external egress gateway
• add missing link scope routes in vpc-nat-gateway
• modify ipam v6 release ip problem
• skip ping gateway for pods during live migration
• don't check conflict for migration pod with only static mac
• fix usage of ovn commands
• fix OVS bridge with bond port in mode 6
• fix underlay subnet in custom VPC
• configurable kube-ovn cni config filename
• replace ecmp dp_hash with hash by src_ip
• set up tunnel correctly in hybrid mode
• check static route conflict
• transfer IP/route earlier in OVS startup
• fix: validate statefulset pod by name

Mics

• use inc-engine/recompute instead of deprecated recomput
• update kind to v0.13.0
• refactor logical router routes
• update ovn and ovs
• add routed check in circulation
• create ip crd in kube-ovn-controller
• update cni version to 1.0
• VIP is decoupled from port security
• Use go to rerimplement ovn-is-leader.sh
• Replace command health check with k8s tcpSocket check
• add gateway check after update subnet

Enhancement

• optimize IPAM initialization
• reduce ovs-ovn restart downtime
• optimize node port-group check
• optimize ovs request in cni

Bugfix

• delete ipam record and static route when gc lsp
• fix: ovs trace flow always ends with controller action
• fix defunct ovn-nbctl daemon

Enhancement

• add kube-ovn-controller switch for EIP and SNAT
• log: show the reason if get gw node failed
• append metrics
• add env-check
• add delete ovs pods after restore nb db
• optimize IPAM initialization
• reduce ovs-ovn restart downtime

Bugfix

• recover ips CR on IPAM initialization
• fix provider-networks status
• support alloc static ip from any subnet after ns supports multi subnets
• replace pod name when create ip crd
• fix error handling for netlink.AddrDel
• ignore all link local unicast addresses/routes
• fix IPAM initialization
• fix adding key to delete Pod queue
• modify init ipam by ip crd only for sts pod
• add routed check in circulation
• delete monitor noexecute toleration
• delete ipam record and static route when gc lsp
• fix: ovs trace flow always ends with controller action

Security

• update alpine to fix CVE-2022-1271
• ignore cni cve
• CVE-2022-27191