Fixed Issues

• Avoid waiting containers block stateful pods' deletion. (#407)

Fixed Issues

• Avoid waiting containers block stateful pods' deletion. (#407)

v0.8.8

Compare

Choose a tag to compare

Fixed Issues

• Only reserve ip instance after pod terminated. (#403)

Improvements

• Introduce --update-ipinstance-status flag for daemon to enable/disable daemon's patching IPInstance CR status while creating pod. (#402)

Fixed Issues

• Only reserve ip instance after pod terminated. (#403)

Improvements

• Introduce --update-ipinstance-status flag for daemon to enable/disable daemon's patching IPInstance CR status while creating pod. (#402)

v0.8.7

Compare

Choose a tag to compare

Fixed Issues

• Forbid flooing for unicast dst mac address in vxlan network. (#397)

Fixed Issues

• Forbid flooing for unicast dst mac address in vxlan network. (#397)

v0.8.6

Compare

Choose a tag to compare

Improvements

• Fix CVE-2016-2183 vulnerability of wehook component.
• Bump controller-runtime from v0.11.2 to v0.13.1.

Improvements

• Fix nil pointer error which might happen in daemon during initializiation. (#391)
• Fix the error that ipv6 "local underlay net" ipset name is longer than 31 characters. (#391)

v0.8.5

Compare

Choose a tag to compare

Fixed Issues

• Fix nil pointer error which might happen in daemon during initializiation. (#391)
• Fix the error that ipv6 "local underlay net" ipset name is longer than 31 characters. (#391)

Fixed Issues

• Fix nil pointer error which might happen in daemon during initializiation. (#391)
• Fix the error that ipv6 "local underlay net" ipset name is longer than 31 characters. (#391)

v0.8.4

Compare

Choose a tag to compare

Fixed Issues

• Add created host interface into CNI result for chained plugins like bandwidth. (#388)

Fixed Issues

• Allow Pod names to be over 63 characters length. (#385)
• Make hybridnet support chained plugins. (#384)

Improvements

• Skip local vtep when generate vxlan fdb entry. (#373)
• Add underlay network nodes conflict validation in webhook. (#377)
• Allow no routable bgp peer exists for a BGP Network and inherit node default route in such cases. (#378)
• Drop possible endless VLAN underlay traffic to avoid route loop. (#379)

Improvements

• Support multiple bgp peers for bgp network. (#370 )
• Make unestablished BGP peers' blocking Pod creation can be optional. (#370 )

Other notable changes

• Update gobgp to v3.11.0 and golang to 1.9.
• Add pkg/client to release tag.

Fixed Issues

• Fix ipv6 subnet capacity calculation error because of int64 overflow. (#366 )
• Fix felix crash because of cni-daemon's executing ipset frequently. (#364 )
• Reserve ips for evicted and completed ip-retained pod. (#365 )

Improvements

• Check accept_ra sysctl before enable ipv6.forwarding. (#367 )

Fixed Issues

• Fix capacity calculation error of 0.X.X.X subnets (#348 )
• Fix invalid validation of vlan id in daemon (#352 )
• Fix retained ip pods' suddenlly getting stuck in Terminating if their owner referrence is removed (#353 )
• Skip unscheduled pods in pod reconciliation in manager (#354 )

Improvements

• Switch package ioutil to os because of deprecation (#349 )

Fixed Issues

• Fix issue of manager getting stuck in processing subnet which starts with IP like 0.X.X.X (#342)
• Fix the access error of NodePort while the externalTrafficPolicy is "Local" (#343)

Improvements

• Handle possible cache sync failure for manager (#338)

Improvements

• Introduce typha for large scale (#333)
• List/watch NodeInfo CR objects instead of Node objects in daemon to reduce communication load (#323)
• Add scripts to clean felix iptables rules automatically while policy is disabled (#330 #333)

Improvements

• Support modifying ipv6 route GC sysctl parameters by daemon (#326)
• Enable RecoverPanic to handle unexpected panics and avoid unnecessary restarts (#323)
• Ensure felix ready before start pod (#327)

Improvements

• Remove all the onlink route flag usages to avoid ipv6 kernel bugs

Fixed Issues

• Fix the error that underlay ip-retained pods will keep being Pending after they are deleted and recreated, if the underlay addresses run out

Fixed Issues

• Fix daemon bug to allow to create dualstack pod with different v4/v6 vlan id

New features

• Support global service when MultiCluster feature is enabled
• Support specifying MAC addresses for stateful workloads

Improvements

• Remove onlink flag of the default route in pods to adapt to Kata
• Change the failurePolicy of hybridnet pod mutating/validating webhook configuration to Ignore, to reduce the risk caused by hybridnet webhook
• Make cni conf configurable on nodes
• Ensure routes of 169.254.1.1 on host if it's unreachable, to make sure proxy_arp can work
• Refine integration test cases for manager
• Improve the format of daemon logs

Fixed Issues

• Fix kube-proxy nodeport datapath error, this happens usually if the endpoints are underlay VLAN pod (Network jitters of nodeport traffic might happen during the upgrade for old versions)
• Fix the scheduling problem of ip-retained VM pods

New features

• Remove DualStack feature gate and make it built in
• Support to retain ip for kubevirt VMs

Improvements

• Bump golang from v1.16 to v1.17
• Add limitations for creating overlapped subnets
• Disable the automatic iptables mode detection of felix
• Print statistics for Network CR
• Remove conversion process from IPInstance v1.1 to v1.2

Fixed Issues

• Fix address duplication error while active-standby switch of manager pods happens

New features

• Change IPInstance APIs and optimize IP allocation performance of manager
• Introduce GlobalBGP type Network

Improvements

• Bump controller-runtime from v0.8.3 to v0.9.7

Fixed Issues

• Fix the error that nodes get "empty" quota while the Underlay Network still have available addresses to allocate
• Fix daemon policy container exit with ip6tables-legacy-save error

Improvements

• Introduce flag enable-vlan-arp-enhancement for daemon to enable/disable enhanced addresses
• Introduce DEFAULT_IP_FAMILY environment variable on dual-stack mode
• Skip webhook validation on host-networking pods
• Introduce vtep-address-cidrs flag for daemon to help select vtep address

Fixed Issues

• Fix daemon policy container init error on ipv6-only node
• Node annotation changed should trigger the reconcile of daemon Node controller
• Fix "to overlay subnet route table 40000 is used by others" error of daemon. It happens if an ipv6 subnet with excluded ip ranges is created
• Fix daemon update dual-stack IPInstance status error
• Fix the error that arp enhanced addresses will be taken as source IP address by mistake
• Fix the error that deprecated bgp rules and routes are not cleaned

Fixed Issues

• Fix creating ip-retained sts pod error when it is recreated and rescheduled to another node

Improvements

• Adjust client QPS and Burst configuration of manager
• Mute useless logs of manager

Fixed Issues

• Fix "file exists" error while creating pod