github.com/kubeovn/kube-ovn

• ae4ce3770 add loop check for tunnel nic (#4736)
• 1bf233b3c fix vm ip lost and show more log about ip delete (#4737)
• b92366b0b add adapt with nodes and networks for anp/banp egress rules (#4731)
• 5fe31c998 ut: fix duplicate lsp name (#4734)
• 11933d11c build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 (#4733)
• a9e73db72 kube-ovn-cni will panic if cidr is invalid (#4729)
• e9a6c3697 build(deps): bump kubevirt.io/api from 1.3.1 to 1.4.0 (#4732)
• 393db6ab1 lb-svc is compatible with dual stack subnets (#4724)
• ccb85730f [bugfix] Optimize gc method at port group and node (#4722)
• 92a0d954d The eip is not cleaned after eip is deleted (#4718) (#4719)
• e806b5336 base: add ovs-sandbox (#4712)
• 427ea72db build(deps): bump kernel.org/pub/linux/libs/security/libcap/cap (#4725)
• f50da5390 ci: bump golangci-lint to v1.62.0 (#4723)
• 5c54e01c4 base: update ovn patches (#4721)
• 2edbf3fe0 ci: add connectivity e2e test (#4658)
• 505495756 ci: bump kind to v0.25.0 (#4720)
• 9e55f4ae9 bump go to 1.23.3 (#4716)
• ad7138bce use metav1.LabelSelectorAsSelector() to convert label selector (#4709)
• 9c4a239e9 minor fixes in vpc pod probe e2e test (#4682)
• d60e328ed Fix ovn nat e2e (#4715)
• f14836aac base: bump gobgp to v3.31.0 (#4708)
• 262961170 add ut in pkg/ovs 24.11.7 (#4713)
• aaa67e613 ut: add unit test for pkg/pvs (#4711)
• e2f5c69dc ut: fix duplicate LSP name (#4710)
• d5e00c246 add ut for ovn-nb-logical_router_policy.go (#4706)
• d81bb1365 feat(natgw): extended nexthop support to advertise ipv4 NRLI over ipv6 sessions (#4704)
• 1dc93da82 ci: re-add ovn vpc nat gw e2e to push needs (#4703)
• 74b5c495a ut: add unit test (#4702)
• 5734a2765 Make NAT gateway generation prefix a variable (#4557)
• 042bdff2b build(deps): bump github.com/osrg/gobgp/v3 from 3.30.0 to 3.31.0 (#4700)
• 63d715864 ut: fix use of closed network connection (#4698)
• d71f0a2f5 fix concurrent issue in ovn-nb_test.go (#4697)
• 5db327096 add ut for ovn-nb-logical_router_port_test.go (#4696)
• 6842df3c9 add process for lb-svc ports update (#4660)
• 451a463f4 add WaitUntil check for ns (#4695)
• e4d1d3836 add ut for ovn-nb-logical_router_policy (#4693)
• 1f0eb6f93 ut: add unit test for ovn-nb-logical_router.go (#4689)
• b057e4ce6 build(deps): bump github.com/onsi/gomega from 1.35.0 to 1.35.1 (#4688)
• 63492716d add fail nb client ut case in ovn-nb-logical_switch_port_test.go (#4685)
• f7f7fa877 base: compile OpenBFDD locally (#4683)
• ef4bb5a63 fix: cache eip should not update (#4673)
• 4c8a49b4c build(deps): bump github.com/onsi/gomega from 1.34.2 to 1.35.0 (#4678)
• d90ae7c94 Revert "build(deps): bump github.com/Microsoft/hcsshim from 0.12.7 to 0.12.9 …" (#4681)
• 768880820 build(deps): bump github.com/Microsoft/hcsshim from 0.12.7 to 0.12.9 (#4677)
• bb398bf2b build(deps): bump github.com/onsi/ginkgo/v2 from 2.20.2 to 2.21.0 (#4679)
• 45c54b6c5 add ut for subnet.go and ovn-nb-acl.go (#4674)
• f966ecc30 add e2e for subnet with namespaceSelector (#4665)
• 3d92683af ut: add ovs and ovn nb and cidr check (#4671)
• 535048dcc add unit for ovn-nb-logical_router_route.go (#4672)
• bc2eb2b80 build(deps): bump kernel.org/pub/linux/libs/security/libcap/cap (#4667)
• 406c3794b add unit test for ovn-nb-nat.go (#4664)
• a6e5276e1 ut: add ovn nat (#4650)
• 44cd6e5c2 add unit test for net.go (#4659)
• 8e9f9479e add ut for ovn-nb-logical_router_port (#4651)
• 1ffd88dad base: fix ovn patch for setting ether dst addr after dnat (#4662)
• ab2c21293 build(deps): bump sigs.k8s.io/controller-runtime from 0.19.0 to 0.19.1 (#4661)
• eb51ad211 bump k8s to v1.31.2 (#4654)
• 62ab30a7d makefile: remove target kind-install-debug (#4656)
• 92f6800bf build(deps): bump k8s.io/kubernetes in the k8s-io group (#4653)
• 5cfb6b4c4 ut: add logical_switch and port (#4644)
• 0706c41ae ut: add unit for ovn-nb-load_balancer (#4646)
• 7003bca4f ci: ignore ovn vpc-nat-gw conformance e2e test (#4649)
• a7a8a9235 fix: bfd should use multi arch (#4647)
• c8288e89b fix sometimes restart kube-ovn-cni ,ipsec not start (#4641)
• a9cd9a1a8 fix: udp bad checksum on VXLAN interface (#4639)
• c414e6b96 add e2e test for accessing nodeport when ovs/ovn component is down (#4642)
• d16bb52da add ovs vsctl , gw chassis, lb healthcheck ut (#4611)
• 2ac7e2c0f ut: fail fast (#4630)
• d02cffc28 use ovn-appctl for ovn components (#4638)
• 79c13434b fix 'invalid memory address or nil pointer dereference' for namespace (#4636)
• 7665b2b68 chart: fix missing CRD properties (#4637)
• ad7c89059 fix: CreateGatewayACL creates duplicate ndACL (#4592)
• aa1e67958 Fix accidental logical switch name conflict in ovn-nb-logical_switch_port_test.go (#4635)
• 03aacacff Add ut for ovn-nb-logical_switch_port.go date 24.10.16pm (#4625)
• c52c8c0cc bump go.uber.org/mock to v0.5.0 (#4632)
• e0e8083f1 docs: updated CHANGELOG.md (#4634)
• c9afcafbe docs: updated CHANGELOG.md (#4633)
• ff6cc124a Refactor network policy matching logic (#4626)
• 18f6ac918 team device not set unmanage (#4629)
• 642973dbb fix: once ovn-encap-csum is set false,it can't be reset to true (#4623)
• 1c19fc70b build(deps): bump aquasecurity/trivy-action from 0.27.0 to 0.28.0 (#4628)
• d1af97bdd bump go to 1.23.2 (#4412)
• 0dbe49e68 ovn-ic: do not restart ovn-controller (#4624)
• 77abe0c04 fix: ut dial tcp longer (#4614)
• 1f227958d fix permission issue in kube-ovn installation script and chart (#4613)
• ea80cf25f docs: updated CHANGELOG.md (#4620)
• 5df224b16 docs: updated CHANGELOG.md (#4619)
• aa8dce0bf build(deps): bump github.com/prometheus/client_golang (#4617)
• f9a5a3b97 build(deps): bump github.com/k8snetworkplumbingwg/network-attachment-definition-client (#4618)
• 63df5fe7d fix: ut (#4609)
• 5cb13da09 fix memory overflow, add mac_binding related options to router (#4603)
• a6f13a67e libovsdb: improve performance for listing logical router policies (#4599)
• 08d8a546f Add unit test in pkg/ovs/ovn-nb-logical_switch_port.go (#4602)
• 071eb8e72 fix: sb ut failed (#4606)
• 27379a662 vsctl ut (#4601)
• e8a9db09d fix logging (#4600)
• 1251e7827 fix: dns overwrites dhcp when enabling dhcp and setting dhcp options at the same time (#4597)
• 42ebd7cdd build(deps): bump aquasecurity/trivy-action from 0.26.0 to 0.27.0 (#4598)
• e91a7426f add namespaceSelector field in subnet (#4520)
• a30d88d03 chart: fix value of env OVN_DB_IPS (#4595)
• a9ca636d1 cni: always enable ipv6 (#4435)
• 2e169a3f0 ut: add ovn ic (#4593)
• 8a3f2ea5a chart: add missing sa imagePullSecrets (#4594)
• 39067cd07 add: fail case ut (#4589)
• 4f80f33ce build(deps): bump aquasecurity/trivy-action from 0.25.0 to 0.26.0 (#4590)
• 73a7ec69a build(deps): bump google.golang.org/protobuf from 1.34.2 to 1.35.1 (#4588)
• 4cd5b0e5c build(deps): bump aquasecurity/trivy-action from 0.24.0 to 0.25.0 (#4587)
• bd766ce4a bump go to 1.22.8 (#4584)
• 004877f00 Fix error log not printed nearby in util package (#4574)
• 1d19ec090 Fix error log not printed nearby in ipam package (#4585)
• e00511de3 gc for security group (#4559)
• b2830a5d5 fix: test_list_chassis_with_no_entries (#4586)
• a676e630f add values for OVSDB_CON_TIMEOUT and OVSDB_INACTIVITY_TIMEOUT (#4568)
• edd2ccf9a Add genev_sys_6081 and vxlan_sys_4789 to cilium devices (#4575)
• 4d5cdc7cd fix slice init length (#4579)
• 03e5c2d1a ci: bump cilium, multus-cni, cert-manager and submariner (#4572)
• 6f3d36bc0 ci: set trivy db repository to public.ecr.aws/aquasecurity/trivy-db:2 (#4570)
• 38298e458 build(deps): bump github.com/osrg/gobgp/v3 from 3.29.0 to 3.30.0 (#4576)
• 57cf0fdec build(deps): bump golang.org/x/sys from 0.25.0 to 0.26.0 (#4581)
• 1865f8dd6 build(deps): bump golang.org/x/time from 0.6.0 to 0.7.0 (#4580)
• 18f4dbace build(deps): bump gopkg.in/k8snetworkplumbingwg/multus-cni.v4 (#4583)
• 5d5480edf build(deps): bump google.golang.org/grpc from 1.67.0 to 1.67.1 (#4577)
• 519370471 Check network mask when init subnet (#4494)
• e90a58a6b Fix error log not printed nearby in ovs package (#4562)
• 3d12fa70d build(deps): bump github.com/Microsoft/hcsshim from 0.12.6 to 0.12.7 (#4561)
• 62b80ca62 docs: updated CHANGELOG.md (#4571)
• 49cba10a7 ut: ovn sb suite (#4549)
• 84203a086 fix ovn0 add ipv6 local-link address (#4547)
• 856dc10a1 build(deps): bump github.com/docker/docker (#4556)
• 2f4a6c247 docs: updated CHANGELOG.md (#4555)
• d38fef188 fix kube-ovn-cni capabilities (#4550)
• 514bc77de docs: updated CHANGELOG.md (#4548)
• 5a70de9c7 allow user to set vxlan_sys_4789 tx off (#4543)
• 2baa5bda7 add utils ut (#4544)
• 73ce0ec8e build(deps): bump github.com/docker/docker (#4541)
• d38914a49 build(deps): bump google.golang.org/grpc from 1.66.2 to 1.67.0 (#4542)
• 996da8152 add arp ut (#4535)
• b90491266 base: rebuild go binary deps from source (#4524)
• 8ba16af2d fix speaker metrics (#4523)
• 412f79904 [fix]: delete the NIC regardless of whether the Pod was found or not. (#4500)
• 2fa78ab8d add ut for ip.go (#4536)
• b406ce91d docs: updated CHANGELOG.md (#4534)
• 94749490a bump multus to v4.1.1 (#4532)
• 5769b072b check whether subnet exists before deleting vpc (#4533)
• a2b22ec2b fix bugs and enhance unit test coverage for all functions in pkg/util/validator.go (#4505)
• 640f6835e build(deps): bump github.com/prometheus/client_golang (#4531)
• 7f3c719ca ut:add ut for func DialTCP and DialAPIServer in apk/util/k8s.go (#4515)
• c06857477 build(deps): bump gopkg.in/k8snetworkplumbingwg/multus-cni.v4 (#4529)
• 217e4860b add ut (#4525)
• 4b06bd07b add pod patch and exec ut (#4521)
• e2697fc91 Utils net ut (#4514)
• 56f786977 add ginkgo ut coverage (#4510)
• a3c6676ab fix mistake to announce ipv4 (#4497)
• 544f2addc ut: add unit for dhcp_options logical_switch and ovn-nb_global (#4508)
• d032f05dd build(deps): bump github.com/k8snetworkplumbingwg/network-attachment-definition-client from 1.7.2 to 1.7.3 (#4522)
• f95e06c9a fix: upgrade submodule ginkgo (#4509)
• f3061ef67 fix: mac arm64 run netlink ut (#4511)
• bf75a65ee bump k8s to v1.31.1 (#4512)
• 14484fd35 build(deps): bump google.golang.org/grpc from 1.66.1 to 1.66.2 (#4517)
• 6bf158781 build(deps): bump github.com/k8snetworkplumbingwg/network-attachment-definition-client (#4518)
• 2b24b2b4c fix mcast e2e error (#4503)
• 979513112 fix: err log (#4507)
• 486cde80a make: add ut cover (#4490)
• 3e843e81d build(deps): bump github.com/containerd/containerd from 1.7.21 to 1.7.22 (#4501)
• f16258302 build(deps): bump google.golang.org/grpc from 1.66.0 to 1.66.1 (#4502)
• 1cf7e5086 fix: gobgp CVE (#4498)
• dbcbc056a add mcast querier ip for multicast (#4375)
• b0bb154f4 bump golangci-lint to v1.61.0 (#4496)
• 0542c92ad build(deps): bump github.com/docker/docker (#4495)
• 3653e74dc fix: support ptp networks with ipv4 /31 netmask and ipv6 /127 netmask (#4425)
• 5391b8015 tproxy: support named port (#4487)
• 2d1152262 fix: ipam ut name conflicts (#4489)
• baaaed0b5 add gobgp client cmd (#4460)
• 70c7b979c ut: add unit test for bfd acl and address_set (#4461)
• 827c50f23 Add ipam (#4451)
• 2214d2702 Add ipam ut (#4455)
• 6d4011f9a bump go to 1.22.7 (#4482)
• d76bf6db6 fix 解决部署遇到的不成功问题 (#4484)
• b9c3c2137 fix: arping reply may duplicate (#4477)
• fd5ce3169 ci: bump cilium to v1.16.1 (#4337)
• ff2300bfb fix bug: dpdk场景下添加删除ProviderNetwork失败 (#4466)
• 1104627f4 build(deps): bump github.com/prometheus/client_golang (#4480)
• 1b46c42a1 build(deps): bump golang.org/x/mod from 0.20.0 to 0.21.0 (#4481)
• 33272f110 fix: kubectl-ko using kube-ovn-cni pod for nsenter (#4478)
• b3075e316 remove incorrect error logging (#4473)
• c55e97aef ci: bump golangci-lint to v1.60.3 (#4474)
• 4e5cc7bb9 build(deps): bump golang.org/x/sys from 0.24.0 to 0.25.0 (#4476)
• e99013eca add anp/banp e2e case (#4347)
• be408f895 when using vf, set pod_nic_type to sriov (#4463)
• 31311598b fix: create and parse coredns template (#4445)
• 938ddada8 kubectl-ko trace using ovs-ovn instead of kube-ovn-cni (#4471)
• 2cfbc91d8 build(deps): bump github.com/opencontainers/runc from 1.1.13 to 1.1.14 (#4469)
• 286c34419 build(deps): bump peter-evans/create-pull-request from 6 to 7 (#4467)
• ee6e590d0 build(deps): bump github.com/onsi/gomega from 1.34.1 to 1.34.2 (#4458)
• 50016edf3 build(deps): bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.20.2 (#4459)
• 6ecb05e5a docs: updated CHANGELOG.md (#4452)
• 80df67b38 metrics: do not export information if a subnet is not validated (#4444)
• 365d17dbc add ut (#4448)
• 07ec2a337 build(deps): bump google.golang.org/grpc from 1.65.0 to 1.66.0 (#4449)
• 0df9de1f9 build(deps): bump github.com/docker/docker (#4450)
• add87ee6e ut: add unit test for ovn.go and ovs/util.go (#4440)
• 72cbfa5e5 Add ipam ut (#4442)
• 509a660f8 build(deps): bump github.com/containerd/containerd from 1.7.20 to 1.7.21 (#4443)
• 2e17cb4dc fix: init default vpc (#4429)
• f7da30552 build(deps): bump github.com/vishvananda/netlink from 1.2.1 to 1.3.0 (#4438)
• aa08ad652 build(deps): bump github.com/prometheus/client_golang (#4439)
• b197ad34e build(deps): bump kubevirt.io/api from 1.3.0 to 1.3.1 (#4431)
• 6f669c705 feat: allow setting default subnet for custom vpc (#4171)
• c1a367b52 Add ipam ut (#4424)
• b21c96c3c bump github.com/vishvananda/netlink to v1.2.1 (#4434)
• 748aaf4bd bump kubevirt to v1.3.1 (#4433)
• 41a23b88b add unit test for ovn-nb-port_group (#4427)
• f93c39336 add unit test for NewAnpACLMatch (#4386)
• 6355a337a build(deps): bump github.com/onsi/ginkgo/v2 from 2.20.0 to 2.20.1 (#4432)
• 5d5b17236 vpc-nat-gateway: use iptables-legacy for centos 7 (#4428)
• 6bfbfe815 feat(bgp): logger & enhance nadProvider config (#4352)
• 46b8f569c netpol: add allow acl rules for u2o logical gateway (#4420)
• 226601a64 build(deps): bump github.com/prometheus/client_golang (#4423)
• 7bb3cb588 build(deps): bump github.com/Microsoft/hcsshim from 0.12.5 to 0.12.6 (#4422)
• e5eba5f10 vpc-nat-gateway: do not add routes for underlay subnets (#4416)
• 0ec244071 Makefile: simplify underlay u2o installation (#4419)
• b077d2f46 bump kind to v0.24.0 (#4411)
• 9e2cc200b bump k8s to v1.31.0 (#4403)
• 1c1e1a520 simplicify if debug (#4402)
• 9c80fc8cc fix kube-ovn-cni run fail on docker (#4409)
• 8a8c06c74 auto fix lint issues in local dev (#4385)
• 25473b58a ci: bump golangci-lint to v1.60.1 (#4407)
• a02733fa4 docs: updated CHANGELOG.md (#4401)
• ac1cc2c6b build(deps): bump github.com/docker/docker (#4400)
• 71acfadb4 build(deps): bump sigs.k8s.io/controller-runtime from 0.18.4 to 0.18.5 (#4398)
• 06542452d fix: uppercase ip address is not recommended (#4372)
• c9c2d3c61 increase health probe timeout (#4397)
• 0cf8c0f4e Support yusur smartnic (#4393)
• 6c48efe58 add log (#4390)
• 966b42ef1 cni-server: do not set sysctl variables (#4395)
• 881644c5a ci: fix git diff (#4388)
• db820a377 ipsec: fix chart installation failure (#4387)
• cbe4e37ce change cidr to avoid conflict (#4392)
• 5fc1c7717 docs: updated CHANGELOG.md (#4391)
• ef40eb019 increase the default probe interval for large cluster (#4389)
• 33d7a282d serve pprof in metrics server if metrics server listens on 0.0.0.0 (#4384)
• f17033e56 fix EOF during TLS handshake caused by health check (#4381)
• ae88ad811 ut: add unit test for SGLostACL (#4378)
• 502a90efe refactor ipsec function (#4334)
• b32eb6ea6 replace protocol check in netpol update (#4359)
• 610ac19ea fix controller-runtime logger not set (#4380)
• c3b3041a1 build(deps): bump golang.org/x/sys from 0.23.0 to 0.24.0 (#4383)
• 5baabfb5f fix: should delete subnet before vpc (#4370)
• 96e4aed19 fix: use route replace to avoid confilcts (#4371)
• 818649cbb Fix DISABLE_MODULES_MANAGEMENT (#4365)
• 0faf8a038 fix: correct the priority of ACL associated with security group (#4366)
• ef4c017e2 bump multus to v4.1.0 (#4377)
• 33399c2dc bump go to 1.22.6 (#4373)
• d50778168 build(deps): bump golang.org/x/mod from 0.19.0 to 0.20.0 (#4367)
• 9c4c6e0ce build(deps): bump golang.org/x/sys from 0.22.0 to 0.23.0 (#4368)
• 631ff2ff1 build(deps): bump golang.org/x/time from 0.5.0 to 0.6.0 (#4369)
• ed16ce5a2 vpc dns: remove unused variable (#4335)
• 5181842ef build(deps): bump github.com/osrg/gobgp/v3 from 3.28.0 to 3.29.0 (#4362)
• 55865b05a build(deps): bump github.com/k8snetworkplumbingwg/network-attachment-definition-client (#4361)
• 204451948 fix lr-lb dnat with multiple distributed gateway ports (#4351)
• e4c67ca93 fix: load-balancer for dnat cleaned after restarting kube-ovn-controller (#4357)
• df2d066b4 build(deps): bump github.com/onsi/gomega from 1.34.0 to 1.34.1 (#4350)
• 386732c68 cni-server: disable udp-fragmentation-offload (#4342)
• fa429125c reduce image size by merging layers (#4346)
• b3b775e91 reduce image sice by merging webhook binary into kube-ovn-cmd (#4345)
• 6261a3ed3 move initDefaultVpc into initOVN (#4344)
• be2ddb920 refactor eip and snat in default vpc with lr policy (#4343)
• 28844842d Add BGP capabilities to the NAT GW (#4285)
• cd3da988d build(deps): bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 (#4340)
• 4ce36b654 build(deps): bump github.com/onsi/gomega from 1.33.1 to 1.34.0 (#4341)
• 41260c8c0 add acl action log annotation for netpol/anp/banp (#4338)
• 006f74e80 Add ut (#4296)
• 22a78ea80 build(deps): bump github.com/prometheus-community/pro-bing (#4339)
• 9316e17cd security: run as non-root user (#4326)
• d80de4599 build(deps): bump github.com/docker/docker (#4336)
• 60040887a crd: fix missing fields (#4333)
• af95247e4 pinger: fix process not terminated on sigkill (#4329)
• 05984fc94 fix: scripts (#4291)
• 9229c4551 build(deps): bump github.com/containernetworking/cni from 1.2.2 to 1.2.3 (#4328)
• 4c5ec03e7 build(deps): bump github.com/docker/docker (#4327)
• 1ba9e7c9e add new linter (#4322)
• d009a27f1 add support for interface activation strategy (#4294)
• a21de7eaf ci: bump submariner to 0.18.0 (#4287)
• be7fd1741 fix dialing https server (#4324)
• 7537eb937 refactor metrics (#4313)
• d9e761cbf metrics: fix missing rbac for sa ovn (#4312)
• 6824a58e2 bump kubevirt to v1.3.0 (#4311)
• 35fcef891 update update-codegen-docker.sh (#4319)
• b2aec9258 ci: add timeout for executing cleanup.sh (#4321)
• 0606d63b2 e2e: skip north gateway test for versions prior to v1.12 (#4320)
• 3a0a9104e metrics: add support for secure serving (#4297)
• 77d6f9985 bump k8s to v1.30.3 (#4305)
• 087e3323b build(deps): bump k8s.io/kubernetes in the k8s-io group (#4309)
• 109fd0a89 build(deps): bump github.com/moby/sys/mountinfo from 0.7.1 to 0.7.2 (#4310)
• 2159ff5ef fix map concurrent read and write crash (#4302)
• 26c04b1bf security: run as unprivileged (#3040)
• 9e928d639 add anp/banp code (#4290)
• 1f58f75dc fix e2e
• 83fba9ea3 Use route policy to reimplement northGateway (#4289)
• 4f0d43d30 build(deps): bump github.com/Microsoft/hcsshim from 0.12.4 to 0.12.5 (#4299)
• e3222733d base: bump ubuntu to 24.04 (#4293)
• ee78b5c3b underlay: set trunks of host nic port (#4282)
• b17975854 do not set gatewayType for non ovn subnet and custom vpc subnet (#4283)
• 8a9f4c1b1 fix using route table name as vpc name (#4284)
• f21c9c308 fix ovn lb not updated due to service update failure (#4280)
• 78fe1f920 vpc-nat-gw: configure routes for subnets by pod annotations (#4278)
• e043e970f docs: updated CHANGELOG.md (#4276)
• e5029d569 fix: set dhcp gateway to U2OInterconnectionIP when enabling dhcp and u2o (#4228)
• 45a16a713 ci: run go mod tidy before building kubectl (#4274)
• 51839ce3e build(deps): bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 (#4275)
• bc61393b2 enable nat gw by default (#4273)
• e56a4cd13 klog: set log file max size to 200MB (#4272)
• e74e6cad3 logrotate: set file size limit to 100M (#4271)
• 0900ace50 remove unused environment variable LOG_ROTATE (#4270)
• 6b5356512 fix e2e (#4269)
• 6ed2463ed ci: disable cgo when building kubelet and cni plugins (#4268)
• 7006d9dd6 when router is deleted return success for static route deletion (#4266)
• cfd2bd70a ipam: fix ip not released for non-ovn subnets (#4265)
• e25bf15f7 fix vpcnatgw image is not synced (#4264)
• 5f8cef9d5 cni-server: break gateway check after pod is terminated/missing (#4248)
• c7310a606 do not create iptables rule for setting tcp mss (#4260)
• 989d854cf fix invalid subnet not sync route (#4258)
• e4cf12180 do not allocate mac for non-ovn subnets (#4242)
• 929e3362b refactor lb svc e2e (#4236)
• 7de95baa6 build(deps): bump golang.org/x/sys from 0.21.0 to 0.22.0 (#4257)
• 082b1488f build(deps): bump golang.org/x/mod from 0.18.0 to 0.19.0 (#4256)
• 877862820 build kubectl and cni plugins from source if vuln found in the base image (#4253)
• 607818c9c add retry check u2o openflow filter rule (#4255)
• 11c4c7640 e2e case "should drop ARP/ND request from localnet port to LRP" (#4251)
• 2b71a56ac check both sts name and UID when handling pod deletion (#4238)
• 41755bfc0 do not exit if chassis is not found (#4246)
• d0e147603 build(deps): bump github.com/osrg/gobgp/v3 from 3.27.0 to 3.28.0 (#4244)
• 09dd08fd7 build(deps): bump github.com/docker/docker (#4245)
• d9b5e4f61 force deleted subnet left ip, can only be handled by human (#4157)
• b614b1bc2 vpc-nat-gateway: configure initial routes by pod annotations (#4240)
• 751fa71f5 vpc-dns: set route to apiserver by pod annotation (#4239)
• 627e2fdbb update node labels/annotations by json merge patch (#4230)
• d857ffbbf vpc-nat-gateway: print messgae to stderr (#4237)
• 9bcee4116 fix: init if nat gw exists (#4232)
• cc9ca11b5 lb svc: fix dead lock (#4235)
• 06fd80b45 ci: dump/upload events on e2e test failure (#4231)
• cbad90e1b ci: collect and upload audit logs on e2e failure (#4227)
• eebe7038b docs: updated CHANGELOG.md (#4234)
• 3e894e23b build(deps): bump github.com/docker/docker (#4233)
• fa8b8ef2c e2e: retry traceroute (#4225)
• 735868470 fix ipv6 service ip not added to ovn lb vips due to pod cache not synced (#4223)
• 816a4bfad build(deps): bump github.com/containernetworking/cni from 1.2.1 to 1.2.2 (#4222)
• c81e91c9f build(deps): bump github.com/docker/docker (#4221)
• be0cf5387 e2e: exec ovn-nbctl via kubectl exec svc/ovn-nb (#4218)
• 42cb4daa3 e2e: add curl timeouts (#4216)
• 81f1927f3 e2e: fix logging (#4220)
• c5f03705d pinger: fix warning logs (#4213)
• 2e80b7efe delete unused scripts (#4214)
• 80b1d62bb base: clean ipset deb files (#4215)
• be5277aec ic: ensure db file is fixed (#4211)
• acf78727b fix getting service cluster ips (#4206)
• a11abec4e add unit test for ip_range (#4125)
• ccff4ed94 fix: nil pointer when subnet is not ready (#4190)
• 6dde684a9 e2e: fix getting ipv4 address from link (#4177)
• bbf29e7b3 docs: updated CHANGELOG.md (#4203)
• f9e53dc59 remove unused annotation (#4191)
• f63172d12 add e2e test cases for nat outgoing routes (#4187)
• 2942337fa e2e: add ginkgo.GinkgoHelper() (#4192)
• e1ddaafb8 build(deps): bump k8s.io/klog/v2 in the k8s-io group (#4202)
• 183b2e606 fix vm not running after changing the subnet (#4199)
• 9684aee46 pinger: reset interface_rx_multicast_packets (#4198)
• 5c6029e58 fix kube-ovn-cni crash for newly added nodes , due to old legacy event in deleteNodeQueue (#4197)
• e16f3809a build(deps): bump k8s.io/klog/v2 from 2.120.1 to 2.130.0 (#4184)
• 6b73daeb8 build(deps): bump github.com/containernetworking/cni from 1.2.0 to 1.2.1 (#4189)
• ee65995a9 build(deps): bump github.com/containernetworking/plugins (#4188)
• 5566029f6 base: bump cni plugins to v1.5.1 (#4185)
• b57964cab fix u2o arp/nd e2e
• e0bcc2967 update ovn upgrade porcess (#4132)
• 7fe3f6e6c add helper function PodIPs() (#4178)
• 2f3c5d48b northd: skip arp/nd request for lrp addresses from localnet ports (#4158)
• bbbb0d509 ci: check pod crashes on installation/e2e failure (#4160)
• 3e933249e fix change vm subnet e2e (#4114)
• f4efa2c86 fix ipam init (#4155)
• a639831a3 use IsZero() to check whether the DeletionTimestamp is nil (#4176)
• 8562d70d9 ci: push amd64 legacy image only for branches >= v1.13 (#4179)
• 3917b8b5f ut add ip range split (#4115)
• e6445d816 fix reconcile routes (#4168)
• b722ffb15 add support for amd64 legacy cpu (#4170)
• 0edbf4e90 build(deps): bump github.com/docker/docker from 26.1.4+incompatible to 27.0.0+incompatible (#4173)
• 10871e85a docs: updated CHANGELOG.md (#4175)
• 49c9ff1d8 e2e: fix retrieving docker network information (#4169)
• 6ac97fbb2 docs: updated CHANGELOG.md (#4166)
• 3da2fa298 fix lr policy recreation after kube-ovn-controller restarts (#4123)
• b6b789081 bump k8s to v1.30.2 (#4164)
• 5132e77ee base: bump kubectl to v1.30.2 (#4163)
• ccd5132d0 ci: fix retrieving docker network subnet/gateway (#4161)
• 98447feb6 update ovn patches (#4143)
• 9c3ff7d36 fix u2o e2e in 1.9 (#4154)
• 351ba96f7 speaker: add option to set node IP to override pod IP (#4140)
• 37b7c46ad Drop u2o arp request (#4135)
• f5b1d2abc add ovn0 default route (#4127)
• 5ed1c9f66 build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 (#4146)
• 51d46cdf1 ovn: add support for conditionally skipping conntrack (#4131)
• 815bfc280 Ipam ut (#4112)
• 50b0b8252 build(deps): bump github.com/Mi

• 112588fc3 release v1.12.35
• 828445a4e dump golang 1.23.12 (#5630)
• 47f8c01dd fix static mac pod conflict with gateway mac (#5623)
• 2898de112 Fix the problem that if available ip is 0 but there is a value in excludeIPs, the fixed ip is used as the ip in excludeIPs but the error noAddressAvaliable is still reported (#5568)
• 9c2d11580 check underlay nic exist before config external bridge (#5520)
• 91c2578b9 bump github.com/go-viper/mapstructure/v2 to v2.3.0
• a1377c821 fix setting LR option always_learn_from_arp_request (#5426)
• 0b4f2a380 controller: set always_learn_from_arp_request to false only when LR is not connected to external network (#5419)
• f54fc8aaa fix parsing resolv.conf when systemd-resolved is running on the host (#5423)
• 78fb865eb fix duplicate acls because of parentkey
• c56cfd8a7 fix(slr): deleting old entries from ipmapping to avoid clogging loadbalancer (#5380)
• 985e294f0 fix(slr): switchlbrule doesn't support multi-homed/ipv6-first pods (#5375)
• 4205ff744 prepare for next release

Contributors

• Mengxin Liu
• SKALA NETWORKS
• changluyi
• clyi
• zhangzujian
• 张祖建

• 2e5315080 release v1.12.34
• b1cb20a7f fix sts/vm lsp in incorrect port groups after rescheduled to another node (#5346)
• 189ce7525 prepare for next release

Contributors

• Mengxin Liu
• 张祖建

• 2e5ef48cd release v1.12.33
• 25ad657a3 add dad check (#5333)
• 0594fa43e netpol: fix missing ACL name (#5281)
• 5b4cc8ac9 fix: kubectl-ko: properly get the number of nodes (#5327)
• c505d25ca prepare for next release

Contributors

• Mengxin Liu
• Robin Lee
• changluyi
• 张祖建

• fb2c1d8f4 release v1.12.32
• 9cc2a4875 bump go to 1.23.10 (#5323)
• 8ff160589 fix podcidr route still use join ip as src ip (#5287)
• d73f752f7 ci: fix cilium chaining with underlay networking (#5226)
• 54021bf79 base: use local patch files (#5207)
• 2bf56792d bump k8s to v1.30.12 (#5185)
• 9f27024ee controller: ensure ovn route policy is reconciled after node is initialized (#5166)
• e416f32ef ci: bump ubuntu to 24.04 (#5153)
• f64f3ea17 fix dbus/NetworkManager connection in Talos (#5140)
• fe45fa8e3 bump go to 1.23.7 (#5105)
• 0d0d6b832 fix: egress network policy not work, when no pod hit matchlabel
• d9e1d9e1d [fix] When the Nat-gw pod container restarts unexpectedly, trigger nat-gw statefulset restart to restore the nat-gw pod configuration (#5070)
• 8c2049b34 kubectl-ko: fix conntrack state (#5038)
• 8e183b1d6 ci: remove legacy network policy e2e (#5035)
• 449fec2ba feat(GC): Add check for GC disabled (#5005)
• 432a98a83 bump k8s to 1.30.10 (#5019)
• 8d33b59ea ci: bump aquasecurity/trivy-action to 0.29.0
• ad2538e19 prepare for next release

Contributors

• Kevin Carter
• Mengxin Liu
• changluyi
• clyi
• xiaoyie
• zhangzujian
• 张祖建

• 89c3acf1e release v1.12.31
• cd0d99ebe fix superfluous response.WriteHeader (#4980)
• dc641799a use httpGet as liveness/readiness probe method (#4945)
• 97dc1210f fix: kube-ovn-cni always dump-flows br-provider per period (#4969)
• 1ad46bed6 controller: consider StatefulSet's start ordinal (#4967)
• 5b859819f bump go to 1.22.12 (#4965)
• 11def018a ci: build arm64 images on arm64 hosted runners (#4936)
• 138da35ac fix log (#4928)
• 3518f6b80 controller: check condition NodeNetworkUnavailable when determining whether node is ready (#4917)
• 7ef9ebaae cni-server: set node NetworkUnavailable condition after join subnet gateway check (#4915)
• b8ba5d84d ipam: check subnet's available ipv6 address count (#4903)
• 26224c58d fix(controller/subnet): controller crashes on subnets if gateway is unspecified and netpol are disabled (#4848)
• 67c9af8c1 bump go to 1.22.10 (#4853)
• b030cbc4d use JSON merge patch to update labels/annotations (#4838)
• e19f48c08 fix getting subnet cidr by protocol (#4844)
• 5e8288be0 ci: wait for kubevirt crd to be created before creating CR (#4839)
• 16955b0b0 build(deps): bump helm/kind-action from 1.10.0 to 1.11.0 (#4837)
• b76c0441c refactor: remove redundant policy route addition in node handling (#4835)
• 3b1357316 prepare for next release

Contributors

• Mengxin Liu
• SKALA NETWORKS
• changluyi
• zbb88888
• zhangzujian
• 张祖建

• 4344a4671 release v1.12.30
• f2c7937a7 skip node local dns ip conntrack when acl is set: (#4810)
• 249b3edc0 bump k8s to v1.30.7 (#4771)
• 86794c287 bump dpdk base image to ubuntu 24.04 (#4770)
• 9dc2ab28f prepare for next release

Contributors

• changluyi
• 张祖建

• 803bceeb4 release v1.12.29
• e1c59860f skip conntrack when access node dns ip (#3894) (#4762)
• 576dfd427 add not found err check for lb-svc (#4748)
• b23c8da43 [bugfix] Optimize gc method at port group and node (#4722)
• b929a11d0 Revert "[bugfix] Unable to correctly gc port group (#4694)"
• 714afd4d9 kube-ovn-cni will panic if cidr is invalid (#4729)
• e12731ddb fix build errors
• c3e8fb477 The eip is not cleaned after eip is deleted (#4718) (#4719)
• c328da4b6 [bugfix] Unable to correctly gc port group (#4694)
• ee560e8d4 VM live migrate (#3767)
• 42f99a717 add process for lb-svc ports update (#4676)
• 57c823967 [bugfix] When add_eip, send a GARP for eip from net1 (#4701)
• 4ee107a85 fix: udp bad checksum on VXLAN interface (#4639)
• 4ba576c31 prepare for next release

Contributors

• Congqi Zhao
• Guangyu Suo
• Mengxin Liu
• bobz965
• changluyi
• cmdy
• hzma
• xiaoyie

• 368e6effb release v1.12.28
• aa7f680d8 Refactor network policy matching logic (#4626)
• 603be7210 team device not set unmanage (#4627)
• cd741a73b prepare for next release

Contributors

• Mengxin Liu
• changluyi

• 748f8189c release v1.12.27
• 6da2b51c8 fix memory overflow, add mac_binding related options to router (#4603) (#4608)
• 207fcfbc8 chart: add missing sa imagePullSecrets (#4594)
• e782ba081 bump go to 1.22.8 (#4584)
• cbae706c3 Add genev_sys_6081 and vxlan_sys_4789 to cilium devices (#4575)
• 1f7ca9d8f ci: set trivy db repository to public.ecr.aws/aquasecurity/trivy-db:2 (#4570)
• 6ba85efb6 prepare for next release

Contributors

• Andrei Kvapil
• changluyi
• 张祖建

• 6b486523f release v1.12.26
• 0078be3b9 fix para input error
• f4a0c780f add values for OVSDB_CON_TIMEOUT and OVSDB_INACTIVITY_TIMEOUT (#4567)
• 58bbdf50b prepare for next release

Contributors

• changluyi
• clyi

• c23f44b93 release v1.12.25
• 3130464a6 fix (#4553)
• ff0e85b70 fix only ipv6 mode should add ovn0 locallink ipv6 address (#4552)
• 1f8b19166 prepare for next release

Contributors

• changluyi

• bc0a6f3c1 release v1.12.24
• 55c9e0653 add ovn0 ipv6 local link address when ipv6 mode (#4545)
• 1fe9e7c1a base: rebuild go binary deps from source (#4524)
• a6617223d prepare for next release

Contributors

• changluyi
• zhangzujian

• 9f890e764 release v1.12.23
• 65312b283 bump multus to v4.1.1 (#4532)
• e98cc1974 bump k8s to v1.30.5 (#4513)
• 2e1887d9c bump go to 1.22.7 (#4482)
• 78b727980 update Makefile (#4472)
• 822019410 tproxy: support named port (#4487)
• 723e8b3cb fix: arping reply may duplicate (#4477)
• cbbe10ab3 Enable inactivity check on ovndb connection (#4006)
• 0d8c1a9e3 support vip dual stack (#3617)
• 2960014ef metrics: do not export information if a subnet is not validated (#4444)
• 810d6dbc5 prepare for next release

Contributors

• Mengxin Liu
• fanriming
• zhangzujian
• 张祖建

• 618701059 release v1.12.22
• 820d95d04 vpc-nat-gateway: use iptables-legacy for centos 7 (#4428)
• b2b55a1c9 netpol: add allow acl rules for u2o logical gateway (#4420)
• 1ecbd5912 Makefile: simplify underlay u2o installation (#4419)
• b2e6a7a51 vpc-nat-gateway: do not add routes for underlay subnets (#4416)
• c03dfd2ea cni-server: fix failure in ipv6/dual clusters running in docker (#4417)
• 786eb0ab2 add acl log annotation (#4414)
• 6d0666469 bump k8s to v1.30.4 (#4410)
• 1827b650e fix kube-ovn-cni run fail on docker (#4406)
• ebd55782a prepare for next release

Contributors

• changluyi
• hzma
• zhangzujian
• 张祖建

• 40ef8d6bc release v1.12.21
• d4692dfe5 increase health probe timeout (#4397)
• 909991a3f cni-server: do not set sysctl variables (#4395)
• 912177f3c fix ovs patch
• cf95de51f prepare for next release

Contributors

• 张祖建

• 918652d60 release v1.12.20
• b867a33f3 increase the default probe interval for large cluster
• 1562b2281 install.sh: add option SECURE_SERVING
• 87e756598 fix EOF during TLS handshake caused by health check (#4381)
• 39980fb0e fix controller-runtime logger not set (#4380)
• fa2316a9c bump go to 1.22.6 (#4373)
• fe218b09f replace protocol check in netpol update (#4356)
• 3133267c7 build(deps): bump github.com/prometheus-community/pro-bing (#4339)
• 541d5f450 cni-server: disable udp-fragmentation-offload (#4342)
• 258408ec6 build(deps): bump github.com/onsi/gomega from 1.34.0 to 1.34.1 (#4350)
• a9784c7b6 build(deps): bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 (#4340)
• 7c5031071 build(deps): bump github.com/onsi/gomega from 1.33.1 to 1.34.0 (#4341)
• 642c2fc71 build(deps): bump github.com/docker/docker (#4336)
• 756c47a7c build(deps): bump github.com/containernetworking/cni from 1.2.2 to 1.2.3 (#4328)
• 341ff27ff build(deps): bump github.com/docker/docker (#4327)
• 2e76fe9c1 pinger: fix process not terminated on sigkill (#4329)
• 7719ce574 fix: scripts (#4291)
• 4e39bd857 fix dialing https server (#4324)
• 8cd578c68 refactor metrics (#4313)
• e0d1dbdbf bump k8s to v1.30.3 (#4317)
• 68797a103 metrics: fix missing rbac for sa ovn (#4312)
• 10781730c metrics: add support for secure serving (#4297)
• b57721129 security: run as unprivileged (#3040)
• 3e52a0ee6 bump k8s to v1.27.16 (#4306)
• b88ed8d21 fix map concurrent read and write crash (#4302)
• 2ded787af use route policy to reimplement northGateway
• 69befe33e underlay: set trunks of host nic port (#4282)
• 79cf20988 fix using route table name as vpc name
• bf5a554ec fix: set dhcp gateway to U2OInterconnectionIP when enabling dhcp and u2o (#4228)
• 54aa76f00 fix ovn lb not updated due to service update failure (#4280)
• e4b4142c7 build(deps): bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 (#4275)
• 0691a8943 prepare for next release

Contributors

• Mengxin Liu
• Zhao Congqi
• dependabot[bot]
• hzma
• zhangzujian
• 张祖建

• 93095c8c9 release v1.12.19
• cbddeea4d update .trivyignore
• d8b4a77c9 ci: run go mod tidy before building kubectl (#4274)
• 1dc25c44c ci: disable cgo when building kubelet and cni plugins (#4268)
• a66dbff18 build kubectl and cni plugins from source if vuln found in the base image (#4253)
• 39cfac4fd ignore cve CVE-2024-24791
• 4877acde7 bump go version
• 1b16809cf enable nat gw by default (#4273)
• 1e53391e4 ipam: fix ip not released for non-ovn subnets (#4265)
• f151e32e3 klog: set log file max size to 200MB (#4272)
• c2e5a0610 logrotate: set file size limit to 100M (#4271)
• 05eb0e166 remove unused environment variable LOG_ROTATE (#4270)
• 331006f7c when router is deleted return success for static route deletion (#4266)
• b16adb60b fix vpcnatgw image is not synced (#4264)
• f56934673 build(deps): bump golang.org/x/sys from 0.21.0 to 0.22.0 (#4257)
• 38db3cf8b build(deps): bump golang.org/x/mod from 0.18.0 to 0.19.0 (#4256)
• d47451394 build(deps): bump github.com/osrg/gobgp/v3 from 3.27.0 to 3.28.0 (#4244)
• 5d16919c0 do not create iptables rule for setting tcp mss (#4260)
• c12c57227 fix invalid subnet not sync route (#4262)
• 7743d6660 update node name label for ip resources (#4242)
• c69f9d432 lb svc: update svc status after configuring nat rules (#4235)
• d7b160d5c vpc-nat-gateway: print messgae to stderr (#4237)
• 217ea26ab check both sts name and UID when handling pod deletion (#4238)
• 35563ed5d do not exit if chassis is not found (#4246)
• d4002b81a ci: do not compile fastpath kernel module for centos (#4247)
• 03ce5a328 update node labels/annotations by json merge patch (#4230)
• c893f524c fix ipv6 service ip not added to ovn lb vips due to pod cache not synced (#4223)
• 6c467fa69 ic: ensure db file is fixed (#4211)
• 194e61558 base: clean ipset deb files (#4215)
• b1b7d3b11 fix getting service cluster ips (#4206)
• 8761e3c68 fix: nil pointer when subnet is not ready (#4190)
• 8708c7223 base: add traceroute
• 289c55260 prepare for next release

Contributors

• Mengxin Liu
• Zhao Congqi
• changluyi
• dependabot[bot]
• zhangzujian
• 张祖建

• 8186a8a22 release v1.12.18
• 65641d31d fix vm not running after changing the subnet (#4199)
• 10cd0ce6a pinger: reset interface_rx_multicast_packets (#4198)
• 05e2ccb51 fix kube-ovn-cni crash for newly added nodes , due to old legacy event in deleteNodeQueue (#4194)
• ff0a7c535 base: bump cni plugins to v1.5.1 (#4185)
• 4a662e221 ci: check pod crashes on installation/e2e failure (#4160)
• b7bf4926a base: bump kubectl to v1.30.2 (#4163)
• 342a2ab87 fix reconcile routes (#4168)
• 8965ecce5 ci: fix retrieving docker network subnet/gateway (#4161)
• 63b336915 prepare for next release

Contributors

• changluyi
• 张祖建

• 2b643c97d release v1.12.17
• 19f91543c Drop u2o arp request 1.12 (#4150)
• e84ab121e add ovn0 default route (#4127)
• acab364f1 distinguish-portSecurity-with-security-group (#4134)
• e53db6edd fix ipam subnet concurrent map iteration and map write (#4126)
• 9e8c5eebf trivy: ignore unfixed CVEs (#4129)
• f266b4eb5 bump go to 1.22.4 (#4121)
• 9077beb57 build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0 (#4118)
• 627c42131 build(deps): bump github.com/osrg/gobgp/v3 from 3.26.0 to 3.27.0 (#4119)
• b496e60e4 fix: IP Add/Sub overflow or underflow (#4111)
• 7b4ff3abd add enable multicast snoop to 1.12 (#4105)
• 2286ffa54 fix: remove change vm subnet directly (#4102)
• b4f54daf7 Makefile: run kubectl-ko script when collecting logs (#4100)
• 64d1e1cdb install.sh: waiting for deleted kube-ovn-pinger to disapper (#4096)
• cde29e90b fix mac conflict (#4095)
• 4fe44ab3a fix: add static route for custom vpc when create subnet with (#3462)
• 2d667f5bd fix: add ip_reserved label for vip (#4093)
• a874aaf7f install.sh: wait for all kube-ovn-pinger pods to be ready (#4082)
• d2e3bf651 ci: print all the previous logs for restarted pods (#4081)
• f271a54df opt: replace ovn-sbctl with ovsdb-client (#4075)
• 2653759af ovs: get controllerrevision with option --ignore-not-found (#4058)
• e0908bfb4 fix exit on error (#4080)
• 6d7ed5d07 delete lease on cleanup (#4079)
• fcde92c1f base: aoivd unnecessary env variables (#4070)
• 38fcd9e1f ci: downgrade node image to v1.29.2 (#4069)
• b1237f9a6 fix crypto/rand: argument to Int is <= 0 (#4077)
• e82c42782 fix backport (#4066)
• 1ba289cb2 fix: should update subnet status after change vm subnet (#4061)
• de09d72b4 ci: build e2e binaries and free disk space on necessary (#4059)
• 94c22af43 crd: add subnet name pattern (#4054)
• f69625d12 fix assignment to entry in nil map (#3925)
• 623c62873 add release cleanup
• 81b8a9de5 prepare for next release

Contributors

• Mengxin Liu
• Zhao Congqi
• bobz965
• changluyi
• dependabot[bot]
• fanriming
• hzma
• xujunjie-cover
• zhangzujian
• 张祖建

• dff82c4f3 release v1.12.16
• 3957427d7 wait for all pods to be deleted before deleting serviceaccount/clusterrole/clusterrolebinding (#4035)
• b77279882 uninstall.sh: delete OVN-POSTROUTING rule in mangle table (#4034)
• 3cb629146 cleanup.sh: remove sa/clusterrole/clusterrolebinding (#4024)
• 70d33bef6 do not use exec for start scripts with trap quit EXIT (#4025)
• 93e313774 bump k8s to 1.27.14 (#4029)
• 85009d5e3 fix node annotations not updated when initializing the default provider-network (#4030)
• 4de2e0944 fix container args (#4020)
• 2e700adc0 fix lsp not updated correctly when logical switch is changed (#4015)
• edee1e544 base: set entrypoint to dumb-init (#4018)
• 03834d807 fix: Resolved the hidden issue with zombie processes (#4004)
• fcfc09951 simplify file reading (#4010)
• d8c8f8ac5 prepare for next release

Contributors

• fanriming
• 张祖建

• ad0849135 release v1.12.15
• 505c041d2 fix lsp not updating addresses (#4011)
• 8d4738c45 bump gosec to 2.19.0
• be8def373 fix: close file (#4007)
• b47f2cefa fix node gc (#3992)
• 2b5be24b8 bump go to 1.22.3 (#3989)
• 6df85a023 build(deps): bump google.golang.org/protobuf from 1.34.0 to 1.34.1 (#3981)
• ad9ee0883 build(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0 (#3980)
• e77634dfa prepare for next release

Contributors

• dependabot[bot]
• guangwu
• zhangzujian
• 张祖建

• 8461d3811 release v1.12.14
• 99fda1eff ignore CVEs in CNI plugins
• 70871e720 ipam: fix IPRangeList clone (#3979)
• 12b85e500 remove unused e2e test cases (#3968)
• fd2874a9e chart: fix kubeVersion to allow for patterns that match sub versions (#3975)
• 4b2d5cbaa prepare for next release

Contributors

• Joachim Hill-Grannec
• zhangzujian
• 张祖建

• ec3c9282c release v1.12.13
• e89577995 bump k8s to v1.27.13 (#3963)
• 8e962a02a fix subnet check ip in using to avoid ipam init (#3964)
• 954df535d add patch permission for cni clusterrole
• db7ea0c69 fix index out of range (#3958)
• bfe803347 fix nil pointer dereference (#3951)
• 72106744c fix: lower camel case (#3942)
• 5fccb52e4 prepare for next release

Contributors

• Zhao Congqi
• bobz965
• 张祖建
• 马洪贞

• 0363e783f release v1.12.12
• dcca4e549 drop both IPv4 and IPv6 traffic in networkpolicy drop acl (#3940)
• 4ff20a51f update net package version (#3936)
• bae875607 add metric for subnet info (#3932)
• 166d9a433 cni-server: set sysctl variables only when the env variables are passed in (#3929)
• 86be0f678 ovn: check whether db file is fixed (#3928)
• 021b99628 fix backport (#3924)
• 4ed15b961 append filepath when compare cni config (#3923)
• 589329223 re calculate subnet using ips while inconsistency detected (#3920)
• 698c93468 update ovn monitor (#3903)
• c91d5b667 add monitor for sysctl para (#3913)
• 36025b576 refactor kubevirt vm e2e (#3914)
• b32f607db support specifying routes when providing IPAM for other CNI plugins (#3904)
• 96a569576 Fix init sg (#3890)
• abd735c61 distinguish portSecurity with security group (#3862)
• d8650a66d fix br-external not init because of no permission after ovn-nat-gw configmap created (#3902)
• 63fa192fd build(deps): bump google.golang.org/grpc from 1.63.0 to 1.63.2 (#3900)
• f8bac0733 build(deps): bump github.com/osrg/gobgp/v3 from 3.24.0 to 3.25.0 (#3897)
• 11eae635b build(deps): bump golang.org/x/sys from 0.18.0 to 0.19.0 (#3896)
• 2a339a658 build(deps): bump golang.org/x/mod from 0.16.0 to 0.17.0 (#3895)
• 696d9f47f build(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.0 (#3898)
• beb224519 build(deps): bump github.com/Microsoft/hcsshim from 0.12.1 to 0.12.2 (#3891)
• c4be969c4 build(deps): bump github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0 (#3875)
• f8655fb65 chart: fix ovs-ovn update strategy (#3887)
• b43ac43cb Fix index out of range in controller security_group (#3845)
• 6609c81af fix: ipam invalid memory address or nil pointer dereference (#3889)
• c207ecae8 add tracepath (#3884)
• 054f1298d prepare for next release

Contributors

• Longchuanzheng
• Zhao Congqi
• bobz965
• dependabot[bot]
• hzma
• zhangzujian
• 张祖建

• 66df5d63f release v1.12.11
• db92bb99e change northd probe interval to 5s (#3882)
• d4f8ebe46 fix go fmt
• 64cd8d3a6 ovn: reduce down time during upgrading from version 21.06 (#3881)
• b347841af compile binaries with debug symbols for debug images (#3871)
• 94041b19e ovn: update patch for skipping ct (#3879)
• 9b183d2e0 ci: fix memory leak reporting caused by ovn-controller crashes (#3873)
• 720e5f62d Update dependencies in go.mod file
• ccefae1de prepare for next release

Contributors

• changluyi
• zhangzujian
• 张祖建

• 4a6888d5d release v1.12.10
• 55c314eff fix: when give ipv4 cidr ipv6 gateway, the gateway will extend infinitely (#3860)
• 577066859 prepare for next release

Contributors

• changluyi

• ee424ae45 release v1.12.9
• 2a956e0be chart: fix missing ENABLE_IC (#3851)
• 7d634ba23 fix: cleanup.sh (#3569)
• 350eabbea exclude vip as encap ip (#3855)
• 3cd21ed6b fix: duplicate ip deletion (#3589)
• 9ba51333a iptables: reject access to invalid service port only for TCP (#3843)
• 19e6a99be Fix 1.12 ipam deletion (#3554)
• 78c41df44 delete lsp and ipam with ip (#3540)
• 7bd3a6d03 update protobuf module (#3841)
• 4c19787fd kubectl-ko: fix subnet diagnose failure (#3808)
• efe08095d pinger: do not setup metrics if disabled (#3806)
• 52e6b3e2a Fix the failure to enable multi-network card traffic mirroring for newly created pods (#3805)
• a83262279 Makefile: add target kind-install-metallb (#3795)
• ca937e58c build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0 (#3792)
• a3ee69a32 build(deps): bump golang.org/x/mod from 0.15.0 to 0.16.0 (#3793)
• 6c53861a1 Refactor build-go targets to use the -trimpath flag
• 442a28054 fix incorrect variable assignment (#3787)
• 08a915a13 prepare for next release

Contributors

• bobz965
• changluyi
• dependabot[bot]
• hzma
• xieyanker
• zhangzujian
• 张祖建

• f8e434c6d release v1.12.8
• 8d8f9496d update release.sh
• 1e0db6d1e prepare for next release

Contributors

• 147384727 release v1.12.7
• 16b563e20 fix sts pod's logical switch port do not update externa_id vendor and ls (#3778)
• 078a03f26 update dependence
• f9f2aaeb8 update release.sh
• 29157d4dd update release.sh
• b5f7a6348 refactor ovn clusterrole (#3755)
• 76ea1c12f prepare for next release

Contributors

• changluyi
• hzma

• a395104de release v1.12.6
• df6a84aaf if startOVNIC firstly, and setazName secondly, the ovn-ic-db may sync the old azname (#3759) (#3763)
• a90654522 modify chart.yaml version
• 0107f9dd6 add action for build base
• f537002cf prepare for next release

Contributors

• changluyi

• b45c8339a release v1.12.5
• aeeb3c7b5 ci: bump github actions
• 71e5da7b1 ci: bump azure/setup-helm to v4.0.0 (#3743)
• 1d544554c base: install libmnl0 instead of libmnl-dev (#3745)
• 669ed067e ci: collect ko logs for all kind clusters (#3744)
• b9224483d ci: fix ovn ic log file name (#3742)
• 5e5fd728d ci: bump kind and node image
• cc8c9ab66 update chart relase action workflow (#3728,#3734,#3691) (#3738)
• b3d8fca7d remove invalid ovs build option (#3733)
• 2aa3311e9 dpdk: remove unnecessary ovn patch (#3736)
• 8e0e4b17f Fix: Resolve issue with skipped execution of sg annotations (#3700)
• ae895e2e3 fix: all gw nodes (#3723)
• bffef867b ovn: remove unnecessary patch (#3720)
• 764580fa8 ci: fix artifact upload
• c71e3949b bump k8s to v1.27.10 (#3693)
• f9c80e127 fix backport (#3697)
• 50b6506d6 remove unused (#3696)
• a0e3b6798 kube-ovn-controller: remove unused codes (#3692)
• 8da2239c8 remove fip controller (#3684)
• 51a3c1e40 build(deps): bump github.com/osrg/gobgp/v3 from 3.22.0 to 3.23.0 (#3688)
• 6d1cbd3c9 Compatible with controller deployment methods before kube-ovn 1.11.16 (#3677)
• ea918989b set after genev_sys_6081 started (#3680)
• c16b634e5 ovn: add nb option version_compatibility (#3671)
• 295871187 Makefile: fix install/upgrade chart (#3678)
• 822df3752 ovn: do not send direct traffic between lports to conntrack (#3663)
• 130f06cb7 ovn-ic-ecmp refactor 1.12 (#3637)
• 8c75820aa build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 (#3669)
• 0da94b589 fix 409 (#3662)
• b2f7da5fc fix nil pointer (#3661)
• 51e32914a chart: fix parsing image tag when the image url contains a port (#3644)
• a9d896ab4 ovs: reduce cpu utilization (#3650)
• 2f7fdb29a kube-ovn-monitor and kube-ovn-pinger export pprof path (#3657)
• 62568275e build(deps): bump github.com/onsi/gomega from 1.30.0 to 1.31.0 (#3641)
• 53e712d2e build(deps): bump actions/cache from 3 to 4 (#3643)
• 4dbe93429 build(deps): bump github.com/onsi/ginkgo/v2 from 2.14.0 to 2.15.0 (#3642)
• 141ceaaa3 SYSCTL_IPV4_IP_NO_PMTU_DISC set default to 0
• 754b172c9 build(deps): bump github.com/evanphx/json-patch/v5 from 5.7.0 to 5.8.0 (#3628)
• fc988842a chart: fix ovs-ovn upgrade (#3613)
• 216c92927 build(deps): bump github.com/emicklei/go-restful/v3 (#3619)
• 74c5b8a03 build(deps): bump github.com/emicklei/go-restful/v3 (#3606)
• 91be66f1e update policy route when subnet cidr is changed (#3587)
• c3f6e3c24 update ipset to v7.17 (#3601)
• 05d0334e9 ovs: increase cpu limit to 2 cores (#3530)
• 8f4220c61 build(deps): bump github.com/osrg/gobgp/v3 from 3.21.0 to 3.22.0 (#3603)
• 4b859054f do not count ips in excludeIPs as available and using IPs (#3582)
• f4311ab07 fix security issue (#3588)
• 9f74ee32d ovn0 ipv6 addr gen mode set 0 (#3579)
• 958aab96f fix: add err log (#3572)
• ad3f674a2 build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 (#3571)
• acb9e97fa Makefile: fix kwok installation (#3561)
• db2aeeba2 fix u2o infinity recycle
• 32604cf13 do not calculate subnet.spec.excludeIPs as availableIPs (#3550)
• 999dc618c add np prefix to networkpolicy name when networkpolicy's name starts with number (#3551)
• 2249e24e9 fix: apply changes to the latest version (#3514)
• 1b27c414c fix ovn ic not clean lsp and lrp when az name contains "-" (#3541)
• 81ef8ff44 build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#3544)
• cd28464f4 Revert "ovn-central: check raft inconsistency from nb/sb logs (#3532)"
• e88e5b2bb ovn-central: check raft inconsistency from nb/sb logs (#3532)
• 2a499b424 fix chassis gc (#3525)
• f07aef034 prepare for next release

Contributors

• Changlu Yi
• Qinghao Huang
• Zhao Congqi
• bobz965
• changluyi
• dependabot[bot]
• hzma
• zhangzujian
• 张祖建

• 366e79957 set release v1.12.4
• 4207a45a1 cni-server: set sysctl variable net.ipv4.ip_no_pmtu_disc to 1 by default (#3504)
• 943a1d99a fix: duplicate gw nodes (#3500)
• 35c7eaf52 add drop invalid rst 1.12 (#3490)
• 60966143a delete String() function (#3488)
• d4adddeee fix: lost gc lsp in previous pr (#3493)
• 1d89ea2ad fix: ipam clean all pod nic ip address and mac even if just delete a nic (#3453)
• 3903f9b06 fix: check chassis before creation (#3482)
• 621fcad72 build(deps): bump github.com/osrg/gobgp/v3 from 3.20.0 to 3.21.0 (#3481)
• cdd435381 fix ovn eip not calculated (#3477)
• 1476c0a12 fix: calculate subnet before handle finalizer (#3469)
• 739825f11 schedule kube-ovn-controller on the kube-ovn-master node (#3479)
• 768dd5fb0 delete vm's lsp and release ipam.ip (#3476)
• 03a82bae1 build(deps): bump github.com/onsi/ginkgo/v2 from 2.13.1 to 2.13.2 (#3475)
• 051499908 build(deps): bump golang.org/x/time from 0.4.0 to 0.5.0 (#3463)
• a45620d8a build(deps): bump golang.org/x/sys (#3464)
• 0fb4f1960 kube-ovn-cni: fix pinger result when timeout is reached (#3457)
• df2a9c36b ovs-healthcheck: ignore error when log file does not exist (#3456)
• 7dc00aad2 ipam: fix duplicate allocation after cidr expansion (#3455)
• 23a4b7336 fix e2e install failed
• 72444c11e readd assigned ip addresses to ipam when subnet has been changed (#3448)
• 03ed9daf6 base: fix missing CFLAGS -fPIC for arm64 (#3428)
• 2f3923c6f fix: multus network status not find dpdk interface name (#3432)
• 5069a03d2 bump k8s to v1.27.8 (#3425)
• ca41d0f44 ci: fix missing environment variables (#3430)
• c736912bc base: fix dpdk build failure (#3426)
• 45e7f1fc8 base: fix ovn build failure (#3340)
• d6adccad3 fix: lsp dhcp options set failed when subnet dhcp option is enabled (#3422)
• 6ee914ccb trivy: ignore CVE-2023-5528
• 7f5e68c5a update policy route nexthops para
• a54fcfed7 ci: fix dpdk jobs (#3405)
• 0fe59db40 ci: free disk space for all x86 jobs (#3406)
• 56b314510 ci: free disk space (#3404)
• b0759192b fix dpdk workflow (#3384)
• 459e2d6d2 base: fix ovn-northd/ovn-controller not creating pidfile in arm64 (#3413)
• 984c0358b support ovn ic ecmp (#3348) (#3410)
• 12625f509 fix kube-ovn-monitor probe (#3409)
• a3c7fb4b8 fix: wrong usage about DeepEqual (#3396)
• 6d6eef434 subnet support config mtu (#3367)
• 005b92bd6 fix dualStack network checkgw raise panic (#3392)
• 9f08f4a24 feat: dpdk-22.11.1 support by kube-ovn (#3388)
• 196133114 fix: gc delete multus ip cr and lsp setting when enable keep vm ip (#3378)
• a37ee6bf1 add kube-ovn-controller nodeAffinity prefer not on ic gateway
• 50c5341cd fix: externalID map should not include external_ids (#3385)
• c670082d3 build(deps): bump github.com/moby/sys/mountinfo from 0.6.2 to 0.7.0
• d271d9e0d build(deps): bump golang.org/x/mod from 0.13.0 to 0.14.0 (#3380)
• f49f84e8f build(deps): bump golang.org/x/time from 0.3.0 to 0.4.0 (#3383)
• dd2af541a build(deps): bump golang.org/x/time from 0.3.0 to 0.4.0 (#3383)
• d683487f8 prepare for next release

Contributors

• Changlu Yi
• bobz965
• changluyi
• dependabot[bot]
• hzma
• pengbinbin1
• wujixin
• xujunjie-cover
• zhangzujian
• 张祖建
• 袁又袁
• 马洪贞

• b64d7e9b1 set release for 1.12.3
• a9cbe0279 kube-ovn-dpdk building need its dpdk base img (#3371)
• b0efd5a9c delete check for existing ip cr (#3361)
• 366e64110 fix IP residue after changing subnet of vm in some scenarios (#3370)
• f593a046c sync acp chart (#3364)
• def751692 kube-ovn-controller: fix memory growth caused by unused workqueue
• 3023336df build(deps): bump github.com/osrg/gobgp/v3 from 3.19.0 to 3.20.0 (#3362)
• c7ffd1f56 fix access svc ip failed, when acl is on (#3350)
• 5da749647 Add Layer 2 forwarding for subnet ports again (#3300)
• 31e77fbf3 add compact for release-1.12 (#3342)
• d771eb8ce prepare for next release

Contributors

• Tobias
• bobz965
• changluyi
• dependabot[bot]
• hzma
• 张祖建
• 袁又袁

• 23a6299c1 set release 1.12.2
• b4abb34a7 Nat reuse router port external ip (#3313)
• a0228ef94 dump cpu/mem profile into file on signal SIGUSR1/SIGUSR2 (#3262)
• 5226abf61 kube-ovn-controller: fix ovn ic log directory not mounted to hostpath (#3322)
• c7e6fc344 fix golang lint error (#3323)
• f779892f7 update go version
• f2eac645b fix build error
• 9375e5924 add type assertion for ip crd (#3311)
• 127a87a97 add load balancer health check (#3216)
• e01a85364 build(deps): bump google.golang.org/grpc from 1.58.3 to 1.59.0 (#3310)
• c4e364173 build(deps): bump github.com/Microsoft/hcsshim from 0.11.1 to 0.11.2 (#3309)
• 418d45f14 support vpc configuration of multiple external network segments through label and crd (#3264)
• 51980378e sync subnet to vpc while switching between custom VPC and default VPC (#3218)
• 529c9f4e9 security: ignore kubectl cve (#3305)
• 29eef2778 Don't enqueue VPC update when DeletionTimestamp is zero (#3302)
• 408c6e9ee Revert "update base image to ubuntu:23.10 (#3289)"
• 671d55db7 add base rules for allowing vrrp packets (#3293)
• c6b2cbdde build(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 (#3295)
• c674f4896 build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0 (#3296)
• af35954f1 webhook: fix ip validation when pod is annotated with an ippool name (#3284)
• 94ecdf7a7 webhook: use dedicated port for health probe (#3285)
• 9cb875a1a add concurrency limiter to ovs-vsctl (#3288)
• 47c4d7257 update base image to ubuntu:23.10 (#3289)
• b94667dec support custom vpc dns its deployment replicas (#3286)
• fa7eecf9d ovs: load kernel module ip_tables only when it exists (#3281)
• de5860e00 update directory name in charts readme (#3276)
• 481d372eb fix ovn build failure (#3275)
• 92654f4e8 build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 (#3271)
• 1036b0a8e build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 (#3271)
• 3cb084edf build(deps): bump github.com/prometheus/client_golang (#3266)
• 8aaca988f build(deps): bump github.com/prometheus/client_golang (#3266)
• e7a91d0a2 prepare for the next release
• 9b03b4adc pinger: increase packet send interval (#3259)
• 70a13529b add init container in vpc-nat-gateway statefulset for init (#3254)
• 1156c03d6 lrp should use chassis name instead of uuid (#3258)

Contributors

• Tobias
• bobz965
• dependabot[bot]
• hzma
• wenwenxiong
• zcq98
• 夜微澜
• 张祖建
• 袁又袁
• 马洪贞