github.com/kubeovn/kube-ovn

• 15861418b update changelog
• 6cf53101f build(deps): bump sigs.k8s.io/controller-runtime from 0.15.0 to 0.15.1 (#3120)
• cd1202ca4 ovn: fix corrupted database file on start (#3112)
• 02f8c630b some fixes in e2e (#3116)
• d8fa8395e controller: fix vpc update (#3117)
• b5b25ffd0 increase event burst size (#3115)
• c8031f6ef build(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 (#3114)
• 6ba997d20 简化 ovn eip 类型 (#3107)
• a0c5e3895 fix u2o policy route allocate too many openflows cause oom (#3099)
• a9fdbf92e Fix relevant annotations are not deleted in hotnoplug nic process (#3108)
• 3c6d6bc05 ovn: delete the db file if the node with new empty db file cannot join cluster for more than 120s (#3101)
• 914bf6130 get all chassis once (#3103)
• 42e0574c2 distinguish nat ip for central subnet with ecmp and active-standby (#3100)
• a27ce4c33 build(deps): bump github.com/osrg/gobgp/v3 from 3.16.0 to 3.17.0 (#3105)
• 68dc1c380 add log near err (#3098)
• c6c472a0e iptables: reject access to invalid service port when kube-proxy works in IPVS mode (#3059)
• f8835ef56 Ovn nat 1 (#3095)
• 5704dae0c skip ok pod (#3090)
• 18580edff ipam: return error for invalid ip range (#3088)
• a7e7a83d1 some fixes in e2e (#3094)
• 882187431 bug_fix if only one port bind to the sg, then unbind the port to the sg ,it will not enforce in port_group (#3092)
• 4c1161e92 fix .status.default when initializing the default vpc (#3086)
• fa91428bc fix repeate set chassis (#3083)
• 68a798f47 build(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0 (#3085)
• da1648ccd fix go fmt
• 88b5912fc fix kube-ovn-speaker log (#3081)
• 89544c352 remove FOSSA status card
• ac648680e cni-server: fix ovn mappings for vpc nat gateway (#3075)
• 0fe9dcb27 fix kube-ovn-speaker (#3076)
• 827a5a273 build(deps): bump github.com/Microsoft/hcsshim from 0.9.10 to 0.10.0 (#3079)
• 38cd9203a ovn client: fix sb chassis existence check (#3072)
• 038ff7def e2e: fix switch lb rule test (#3071)
• e14ebbd58 bump github.com/docker/docker to v24.0.5 (#3073)
• 90c830574 iptables: add --random-fully to SNAT rules (#3066)
• 1350397ec update lint tmeout
• ff6d03d0e build(deps): bump github.com/onsi/gomega from 1.27.9 to 1.27.10 (#3069)
• 76b01496f bump k8s to v1.27.4 (#3063)
• d8e59ab61 e2e: do not import pkg/daemon (#3055)
• 20a6526c4 build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.9 (#3065)
• af335ba81 build(deps): bump github.com/Microsoft/hcsshim from 0.9.9 to 0.9.10 (#3061)
• 976a32b01 ci: fix multus installation (#3062)
• 0d1599ffd add srl connectivity test (#3056)
• 42f35a358 ipam: fix ippool with single dual-stack address (#3054)
• 2ba3b8e54 controller: skip VIP gc if LB not found (#3048)
• 52232b5e3 keep vm vip when enableKeepVmIP is true (#3053)
• ed58b2103 cni: reduce memory usage (#3047)
• 3be1e84c2 set genev_sys_6081 tx checksum off (#3045)
• 4e761156c fix vpc lb init (#3046)
• f4f80415a custom vpc pod support tcp http probe with tproxy method (#3024)
• 494209d3c change log (#3042)
• b40c35b8c Makefile: add deepflow and kwok installation (#3036)
• 5a0686b27 windows: fix ovn patches (#3035)
• e3b7439d4 ci: pin go version to 1.20.5 (#3034)
• 97a3e1bc9 static ip in exclude-ips can be allocated normally when subnet's availableIPs is 0 (#3031)
• 9d88e4970 pinger: use fully qualified domain name (#3032)
• f3833f91b feat: suport kubevirt nic hotplug (#3013)
• 62f332897 fix lrp eip not clean (#3026)
• 047af4a21 build(deps): bump helm/kind-action from 1.7.0 to 1.8.0 (#3029)
• e01e616ee update maintainer
• ea9c1f1e5 uninstall.sh: fix ipset name (#3028)
• 9e6dc6366 build(deps): bump github.com/docker/docker (#3027)
• 3dd7f4ab7 replace ovn legacy client with libovsdb (#3018)
• c5bfdb464 install.sh: fix duplicate resources apply (#3023)
• 2e4fb05cf build(deps): bump github.com/docker/docker (#3019)
• aefaef5ab build(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.2 (#3020)
• 1f1fb82e4 ovn: fix cluster connections when SSL is enabled (#3001)
• 18560c964 cleanup.sh: wait for provier-networks to be deleted before deleting kube-ovn-cni (#3006)
• 9304ae5a4 kube-ovn-controller: fix workqueue metrics (#3011)
• d4153885e ci: fix go cache key (#3015)
• 5a5f66ebf fix vlan subnet use logical gw can not access outside cluster node (#3007)
• 18fd55ddf build(deps): bump github.com/prometheus-community/pro-bing (#3016)
• 269f460d7 fix vpc already delete while delete policy route (#3005)
• e744d76ea make compatible with simplicified enable-eip-snat-cm (#3009)
• 2a6525300 build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 (#3012)
• d5f89bce7 subnet: fix nat outgoing policy rule (#3003)
• 8358a91e8 build(deps): bump github.com/osrg/gobgp/v3 from 3.15.0 to 3.16.0 (#3010)
• fe924e9f4 fix subnet finalizer (#3004)
• 12366937b chart: fix readOnly in volumes (#3002)
• d5462b10c libovsdb: various bug fixes (#2998)
• af04530e9 choose subnet by pod's annotation in networkpolicy (#2987)
• 5c455499b IPPool: fix missing support for CIDR (#2982)
• f2d063a85 kubectl ko performance enhance (#2975)
• d5d196e7c fix deleting old sb chassis for a re-added node (#2989)
• 30cd09e6e add e2e for new ippool feature (#2981)
• 5fdf1f9ee underlay: fix NetworkManager syncer for virtual interfaces (#2988)
• 1bb51239c underlay: does not set a device managed to no if it has VLAN managed by NM (#2986)
• 3793e9937 build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 (#2985)
• 6a5bfe46d support helm install hybrid_dpdk ovs-ovn (#2980)
• dc40a8cb6 add unittest for IPAM (#2977)
• daa436d3c IPAM: fix subnet mutex not released when static IP is out of range (#2979)
• 65fd8a4aa fix initialization check of vpc nat gateway configuration (#2978)
• e558702de refactor: make qos test cases parallel (#2957)
• 27685a173 IPAM: add support for ippool (#2958)
• 41b4f266d build(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 (#2974)
• 57b01b4ad ovn ic support dual (#2970)
• 7a14cf219 base: fix ovn patches (#2971)
• a5194e668 build(deps): bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 (#2968)
• a5e63c720 add detail comment (#2969)
• 13256fab7 1. add host multicast perf (#2965)
• 33b6df120 cni-server: reconcile ovn0 routes periodically (#2963)
• e4f682675 uninstall.sh: flush and delete iptables chain OVN-MASQUERADE (#2961)
• 9fbebd340 fix e2e failed (#2960)
• 5de251721 u2o specify u2oip from v1.9 (#2934)
• 30ea6d6c4 underlay: sync NetworkManager IP config to OVS bridge (#2949)
• 27a2f300c chore: USERS.md (#2955)
• 1c29580e9 bump k8s version to v1.27.3 (#2953)
• c0730acb7 ci: fix build-base strategy (#2950)
• f52b15091 e2e: add qos policy test cases (#2924)
• d8739d29b typo (#2952)
• de9c96036 build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 (#2951)
• f4b3c0fe1 build(deps): bump github.com/prometheus/client_golang (#2948)
• e13c2005d Revert "nm not managed only in the change provide nic name case (#2754)" (#2944)
• 765dc8d7f add permision for test-server.sh (#2942)
• a9d0b4be5 Kubectl ko diagnose perf (#2915)
• 8f414f724 build(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0 (#2940)
• 88f706e41 controller: fix DHCP MTU when the default network mode is underlay (#2941)
• ea56b5603 e2e: fix u2o case (#2931)
• c1c716f18 add err log to help find conflict ip owner (#2939)
• 1f27076f7 support set the mtu of dhcpv4_options (#2930)
• f1d2011a9 modify lb-svc dnat port error (#2927)
• d7edac78a fix race condition in gateway check logs (#2928)
• fc7c16ae7 add subnet.spec.u2oInterconnectionIP (#2921)
• 6105d57b4 disable ai review
• 8773ea3d4 e2e: fix waiting deployment to be restarted (#2909)
• 56927913e make conformance with underlay pn vlan subnet has no gw (#2908)
• 0356a63fe fix: natgw init check command not work (#2923)
• 3a8e13ee3 fix issue 2916 (#2917)
• 517d3791a add sync map to fix cocurrent write (#2918)
• dff950b18 cni-server: clear iptables mark before doing masquerade (#2919)
• d043a2d2e build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0 (#2913)
• 525b0b76d build(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8 (#2914)
• 3616d3de0 For eip created without spec.V4ip this field (#2912)
• ace0b970b match outgoing interface when perform snat (#2911)
• d61a2ad64 libovsdb: ignore not found error when listing objects with a filter (#2900)
• 78f923a9f build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 (#2903)
• 0e27e0caa build(deps): bump github.com/osrg/gobgp/v3 from 3.14.0 to 3.15.0 (#2904)
• fd92c2a87 fix base build
• 668287af8 fix build base ci
• a17461409 fix build base ci
• 2f52d9297 refactor IPAM (#2896)
• db51370fd add e2e u2o vpc version check (#2901)
• 6acecb604 kube-ovn-controller: fix subnet update (#2882)
• 35aa8b403 Supporting user-defined kubelet directory (#2893)
• 3883a744c ci: use latest golangci-lint
• efe3ee34f underlay: do not delete patch ports created by ovn-controller (#2851)
• 04c64f0ae update pr-review
• aa1ffaa3a auto build base for release branches
• fe4eec778 Add natoutgoing policy rules (#2883)
• bbe04e89d pin golangci-lint version
• 0c5f90553 skip case 'connect to NodePort service with external traffic policy set to Local from other nodes' (#2895)
• 93f027f3e refactor subnet gateway (#2872)
• 33c526237 update webhook check (#2878)
• a123be78e skip pr-review as run out openai quota
• 5c2c94873 skip kubectl cve
• 403c2dcd7 build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7 (#2890)
• 589d0b6f8 e2e: multiple external network (#2884)
• 79521c318 build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#2885)
• 71253fe5f fix vip str format (#2879)
• 6b5345ff2 ci: fix valgrind result analysis (#2853)
• 7c80a1358 ovs: fix memory leak in qos (#2871)
• 9f39621a8 feat: vpc nat gw e2e (#2866)
• e68b983b1 build(deps): bump github.com/docker/docker (#2875)
• 056b4cf83 fix gc nil pointer (#2858)
• 32b85219c bump k8s to v1.27.2 (#2861)
• a80b3754c add e2e test for slr (#2841)
• 20b20366d Move docs to new website (#2862)
• 24d9dfeef build(deps): bump gopkg.in/k8snetworkplumbingwg/multus-cni.v4 (#2860)
• 83a47a734 update dependabot
• d6202bc7a refactor clusterrole for kube-ovn (#2833)
• b1c77ad73 some fixes in CI/e2e (#2856)
• a94fb0b21 manage ovn bfd with libovsdb (#2812)
• d9a038ce9 update the volumeMounts premission (#2852)
• d642f5b58 fix vip lsp not clean (#2848)
• a1cf2b39b U2o support custom vpc (#2831)
• 2068d879c kubectl-ko: fix trace when u2oInterconnection is enabled (#2836)
• 6ee56d089 ci: detect ovs/ovn memory leak (#2839)
• 776567739 iptables: always do SNAT for access from other nodes to nodeport with external traffic policy set to Local (#2844)
• 175fb262e fix underlay access to node through ovn0 (#2842)
• 98392b3a1 build(deps): bump github.com/docker/docker (#2843)
• da944a3ea adapt vpc dns in master (#2822)
• c7b7a0a5f bump go dependencies (#2820)
• 94d7cc867 fix MTU when subnet is using logical gateway (#2834)
• 486c61aef refactor image builds (#2818)
• a7fd9ddf9 build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#2832)
• 667f5a7c6 build(deps): bump github.com/onsi/gomega from 1.27.6 to 1.27.7 (#2830)
• 853abd9d9 vip support create arp proxy logical switch port (#2817)
• 46bdd01ab build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 (#2828)
• e988089ee build(deps): bump github.com/docker/docker (#2827)
• 3b8c9edc5 add route for service ip range when init vpc-nat-gw (#2821)
• 4f015f6d3 do not allocate MAC address when kube-ovn is called as an IPAM plugin (#2816)
• a30daea4f Iptables nat support share eip (#2805)
• 0466edce6 fix typos (#2815)
• fca6c9d51 fix some typos (#2814)
• 630104d55 add iperf to test group multicast (#2796)
• 2ba3846b0 add available check for northd enpoint (#2799)
• 253358ea8 manage ovn lr static route with libovsdb (#2804)
• 781b47d91 add support of user-defined endpoints to SwitchLBRule (#2777)
• 74221a6e4 e2e: fix test container not removed (#2800)
• 6ddd03bf2 manage ovn lr policy with libovsdb (#2788)
• 7350db5fa build(deps): bump github.com/docker/distribution (#2797)
• 8f43028a2 fix handedeletePod repeat 4 times (#2789)
• c8af3dd36 fix cleanup order (#2792)
• b9542ad35 fix missing main route table for the default vpc (#2785)
• 1511573dc add ovn DVR fip e2e (#2780)
• 0127e10a2 build(deps): bump github.com/containernetworking/plugins (#2784)
• 100227bee add key lock for more resources (#2781)
• 16db5082d bump cni plugins to v1.3.0 (#2786)
• 08e2e66f2 replace util.DefaultVpc with c.config.ClusterRouter (#2782)
• e1154acf6 fix static route recreation after kube-ovn-controller restarts (#2778)
• e7190e6ae clean up code about static routes (#2779)
• b1a339b77 Reorder cleanup step by put subnet and vpc to the last to avoid conflict (#2776)
• a2b789cca optimize kube-ovn-controller logic (#2771)
• 3b2b07166 use rate limiting queue with delaying for pod deletion events (#2774)
• 04e4d2582 fix underlay subnet kubectl ko trace error (#2773)
• 9b1de4816 feat: natgw qos (#2753)
• 11b171e14 build(deps): bump github.com/docker/docker (#2770)
• 62d8122c8 fix ip statistics in subnet status (#2769)
• d3d01762c informer: wait for cache sync before adding event handlers (#2768)
• a23dd865a build(deps): bump github.com/scylladb/go-set (#2766)
• e2bf60f76 support disable arp check ip conflict in vlan provider network (#2760)
• c55cbd6e0 replace string map with string set (#2765)
• 99be9cb0e cni-server: wait ovs-vswitchd to be running (#2759)
• 1933ed872 kubectl-ko: support trace for pod with host network (#2761)
• bf1a3d7c4 libovsdb: fix potential duplicate addresses (#2763)
• 5585d447a ci: run kube-ovn e2e for underlay (#2762)
• cf1748c64 kubectl-ko: fix pod tracing in underlay (#2757)
• 6db99d531 When Subnet spec.vpc is updated, the status in VPC should also be updated. (#2756)
• 328a8911d ovn-nbctl: remove unused functions (#2755)
• 86a07a30e add route table option in static route for subnet (#2748)
• f6414ce18 replace acl/address_set function call with ovnClient (#2648)
• c77f36818 nm not managed only in the change provide nic name case (#2754)
• cc1be3ee7 support node local dns cache (#2733)
• d7fa2a491 build(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 (#2752)
• faff1e627 build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0 (#2751)
• bdd201b16 update eip qos procees, replace qosLabelEIP with natLabelEip (#2736)
• d1711acd2 refresh nat gw image before using it (#2743)
• 353df49ac build(deps): bump github.com/prometheus/client_golang (#2745)
• 91400eccc Using full repo name to avoid short-name error in podman (#2746)
• fa404a061 build(deps): bump github.com/osrg/gobgp/v3 from 3.13.0 to 3.14.0 (#2738)
• 7eed8341a add policy route when use old active gateway node for centralized subnet (#2722)
• 66615b6d8 feat: support for multiple external network (#2725)
• f8328bdbf build(deps): bump github.com/docker/docker (#2732)
• 6198f691b build(deps): bump github.com/Microsoft/hcsshim from 0.9.8 to 0.9.9 (#2731)
• 2a015e5c4 base: remove patch for fixing ofpbuf memory leak (#2715)
• a01f9606d fix recover db failed using method in (#2711)
• a6d2a53cc refactor: improve performance by using cache (#2713)
• 7dbfd2be0 For dualstack and ipv6 the default ipv6 range should be same with the ipv4 cidr. (#2708)
• 15780bfbb feat: support dynamically changing qos for EIP (#2671)
• d865b48d1 base: refactor dockerfile (#2696)
• 53bfcf447 kubectl-ko: add support for tracing nodes (#2697)
• f5fee4c93 cni-server: do not perform ipv4 conflict detection during VM live migration (#2693)
• 942b87d13 fix: iptables nat gw e2e not clean sts eth0 net1 ip (#2698)
• 236574c75 Add random fully when nat (#2681)
• 9e3f70c1e replace StrategicMergePatchType with MergePatchType (#2694)
• b59bfd331 ci: fix scheduled vpc nat gateway e2e (#2692)
• d469235f9 ovn-controller: do not send GARP on localnet for Kube-OVN ports (#2690)
• 7db85edd0 netpol: fix enqueueing network policy after LSP creation (#2687)
• aba724431 add tcp mem collector (#2683)
• 07a6d4cae fix manifest yamls (#2689)
• 1d6a0fe4b attach node name label in ip cr (#2680)
• 233dc61ec adapt ippool annotation (#2678)
• 095dca268 netpol: fix packet drop casued by incorrect address set deletion (#2677)
• 3dc36c8c3 fix kubectl ko using ovn-central pod that not in a good status (#2676)
• 9c5523f7f add nat gw e2e (#2639)
• a9993dac3 add workflows for release chart (#2672)
• 4399963e7 build(deps): bump github.com/Microsoft/go-winio from 0.6.0 to 0.6.1 (#2663)
• d6b0c28df remove auto update k8s and cadvisor
• b57f36ff3 build(deps): bump k8s.io/sample-controller from 0.26.3 to 0.26.4 (#2675)
• a33adde2f ignore k8s major and minor dependencies as they always break build.
• 68f813e0f rename charts (#2667)
• 933d76e3f ipam update condition refactor (#2651)
• 05e725160 fix LSP existence check (#2657)
• f84343e84 fix network policy issues (#2652)
• 148f1bf4a Resolve SetLoadBalancerAffinityTimeout not being effective (#2647)
• 0b5fc5d36 broadcast free arp when pod is setup (#2638)
• dc31cbd20 delete sync user (#2629)
• 7e872fbe5 fix: eip qos (#2632)
• ddf28fc2f fix: make webhook port configurable. (#2631)
• c53d58dac support ovn ipsec (#2616)
• 53bf75d21 feat: add support for EIP QoS (#2550)
• 1fc5d8534 libovsdb: fix race condition in OVN LB operations (#2625)
• cfff2db3d fix IPAM allocation caused by incorrect pod annotations patch (#2624)
• 3e67e8935 ci: deploy multus in thick mode (#2628)
• 1caaea2ab libovsdb: use monitor_cond as the monitor method (#2627)
• c0ab8351c ci: fix multus installation (#2622)
• 84a910b02 ovs: fix dpif-netlink ofpbuf memory leak (#2620)
• 42a86869e Optimized tolerations code in vpc-nat-gw (#2613)
• 1e8e38288 replace port_group function call with ovnClient (#2608)
• 9b577403b reduce test binary size and add missing webhook build (#2610)
• 949eb8b73 fix: ovneip print column and finalizer (#2593)
• 5babe8e69 add affinity to vpc-nat-gw (#2609)
• 6bf15d4a4 ci: fix multus installation (#2604)
• 8629d6340 update .gitignore (#2600)
• 254598fbd bump go modules (#2603)
• 602b16052 build(deps): bump peter-evans/create-pull-request from 4 to 5 (#2606)
• 787616f1c build(deps): bump github.com/docker/docker (#2605)
• 62b8761d0 build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 (#2607)
• d2523f466 cut invalid OVN_NB_DAEMON to make log more readable (#2601)
• 4c7ddc68d unittest: fix length assertion (#2597)
• 7ba428d71 use copilot to generate pr content
• 1a474fd98 replace lb function call with ovnClient (#2598)
• a73deb47a build(deps): bump github.com/osrg/gobgp/v3 from 3.12.0 to 3.13.0 (#2596)
• 2fb1f95a9 Merge handleAddPod with handleUpdatePod. (#2563)
• 9399c1e1f fix log (#2586)
• da323a52d fix: ovn snat and fip delete (#2584)
• 048e9315f underlay: get address/route before setting nm managed to no (#2592)
• 5d036cd56 update chart description (#2582)
• 6d50bdc36 iptables: use the same mode with kube-proxy (#2535)
• 09477984f ci: bump kind image to v1.26.3 (#2581)
• 5b7bdccb0 fix: invalid memory address (#2585)
• cba9c16e6 kubectl ko change solution to collect logs to path kubectl-ko-log (#2575)
• bb268618f if one item is removed, do not requeue (#2578)
• 5aad7c535 build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6 (#2579)
• a9d66220d fix vpc dns when ovn-default is dualstack (#2576)
• 279717ca7 move the vpc-nat generic configurations into one single ConfigMap (#2574)
• 887df215a feat: add ovn dnat (#2565)
• 02a868734 Fix kubectl ko log loss when restart deployment or ds (#2531)
• 1d1f5fabb add wait until (#2569)
• c0e843fd4 do no review dependency update
• a7ccd1ae0 build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 (#2572)
• 5dce9cd2c move ipam.subnet.mutex to caller (#2571)
• 9fba0b548 build(deps): bump sigs.k8s.io/controller-runtime from 0.14.5 to 0.14.6 (#2568)
• 3f7997b31 fix: memory leak in IPAM caused by leftover map keys (#2566)
• 1e9f35299 build(deps): bump github.com/docker/docker (#2567)
• 8e03e97b8 fix ovn-bridge-mappings deletion (#2564)
• e19620b0a fix lrp deletion after upgrade (#2548)
• ed9283489 fix gw label for vpc update field (#2562)
• 642fa92a2 update CRD in helm chart (#2560)
• 1a41369d6 fix CRD indent in install.sh (#2559)
• f955143f7 fix update snat rules not effect correctly (#2554)
• fd6ec3d8a fix go mod list (#2556)
• b4e7e2e87 do not set device unmanaged if NetworkManager is not running (#2549)
• fe1b4ac62 update review bot
• f9eb0ca41 build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5 (#2551)
• 955cf0ffb underlay: fix network manager operation (#2546)
• b8fc9d9a0 controller: fix apiserver connection timeout on startup (#2545)
• 2ae8a9afc fix update fip rules not effect correctly (#2540)
• 98dc2f251 fix lsp deletion failure when external-ids:ls is empty (#2544)
• 6b9cdd33a sync parameters to charts from install script (#2526)
• 8c49fc012 underlay: delete altname after renaming the link (#2539)
• 2a81f4043 failed to delete ovn-fip or ovn-snat (#2534)
• 17807e555 fix encap_ip will be lost when we restart the ovs-dpdk node (#2543)
• 829e74c2f fix service fail (#2537)
• bd91f8b86 Add speaker param check (#2538)
• 7e6feabe8 feat: support nic-hotplug to a running pod. (#2521)
• bbe1f3e88 build(deps): bump google.golang.org/grpc from 1.53.0 to 1.54.0 (#2541)
• ae51a6561 fix update dnat rules not effect correctly (#2518)
• 569b576ac underlay: fix link name exchange (#2516)
• e97109590 add vip to webhook e2e (#2525)
• 30d30bfea fix submariner e2e (#2519)
• 9eda4859f fix lsp gc after upgrade (#2513)
• 0b8964c9e fix: ovn-fip creation failure due to an excessively long label (#2529)
• cc8a11d72 add sleep (#2523)
• 416cc7727 when restart deployment kube-ovn-controller the kubectl ko log loss (#2508)
• e7085dec7 optimize e2e framework (#2492)
• 4b59bdfc3 fix ovs patches (#2506)
• 1138c2cff fix subnet iprange not correct (#2505)
• 0ebb67853 bump k8s to v1.26.3 (#2514)
• 6fb799232 add kubevirt multus nic lsp before gc process (#2504)
• 3fc6d8e34 update slack link
• 46d9edbd2 docs: updated CHANGELOG.md (#2515)
• 36329d54c optimize ovs upgrade script (#2512)
• f8aabdf58 ci: change to pull_request_target
• 089d8cd20 ci: add openai to review the code (#2511)
• ee5e59a94 add support of user-defined image name for vpc-dns (#2502)
• 20e702226 build(deps): bump google.golang.org/protobuf from 1.29.1 to 1.30.0 (#2500)
• b6913c522 build(deps): bump github.com/Microsoft/hcsshim from 0.9.7 to 0.9.8 (#2499)
• 443dd58bf replace lr/ls/lrp/lsp function call with ovnClient (#2477)
• 599ed2349 ci: fix go cache (#2498)
• 0606f90df add skip (#2491)
• 1aff1c4f5 ensure address label is correct before deleting it (#2487)
• e9dd28929 fix scheduled submariner e2e (#2469)
• c66a93ac7 build(deps): bump actions/setup-go from 3 to 4 (#2490)
• a8aede741 build(deps): bump github.com/onsi/gomega from 1.27.3 to 1.27.4 (#2489)
• 70a220a01 add some sleep wait iptables clean (#2488)
• 0b8e53463 Add kubectl ko log (#2451)
• c3620cd09 fix: gw configmap may not exist (#2484)
• a31235b11 fix ovs qos e2e for versions prior to v1.12 (#2483)
• 1470c10d3 add node to addNodeQueue if required annations are missing (#2481)
• 47a705577 Add jitter support to netem qos parameters (#2476)
• b15fc51bb build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.29.1 (#2480)
• d1cd3dddf fix ovs-ovn startup/restart (#2467)
• b26784f1d fix changging the stopped vm's subnets, the vm cann't start normally (#2463)
• 7e2e437d5 build(deps): bump github.com/onsi/gomega from 1.27.2 to 1.27.3 (#2475)
• 5b07ccbbc when we delete the pod，it's no need to update the sgs assign to pod (#2465)
• 3fd564b77 fix libovsdb issues (#2462)
• 0689a7293 fix ips CR not found due to etcd error (#2472)
• e368a20ed wait for subnet lb (#2471)
• 0ecd9aff9 chore: update base periodically to resolve security issues. (#2470)
• 5387acf40 do not delete external switch if it is created by provider network vlan subnet (#2449)
• 282706d67 add upgrade compatibility (#2468)
• 482167a92 ci: fix ovn-ic installation (#2456)
• 2bce5080f Fixed：Prevents grep from prematurely exiting the shell script if it cannot find a pattern (#2466)
• 4d850e017 add install for webhook (#2460)
• f17b4348b e2e add some debug info and sleep (#2439)
• 8df83cb14 do not set subnet's vlan empty on failure (#2445)
• 7ae8db6cf wait subnet lb clear in set subnet EnableLb to false e2e (#2450)
• 674cc2907 build(deps): bump github.com/emicklei/go-restful/v3 (#2458)
• e4c089abe ci(Mergify): configuration update (#2457)
• 0444a2b20 kube-ovn-speaker support IPv6/Dual (#2455)
• 790c7cc29 replace nb_global function call with ovnClient (#2454)
• 0d129742f build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0 (#2452)
• b399cca68 fix parsing logical

• d9154f1e1 release v1.11.24
• 3056aa7fc fix cve (#5631)
• 6f029865e prepare for next release

Contributors

• Mengxin Liu
• changluyi

• 513a68d91 release v1.11.23
• cfe30482e Fix mac conflict 1.11 (#5622)
• b1cae7830 Fix the problem that if available ip is 0 but there is a value in excludeIPs, the fixed ip is used as the ip in excludeIPs but the error noAddressAvaliable is still reported (#5570)
• e41cae0a0 check underlay nic exist before config external bridge (#5520)
• 182ce19da Revert "fix dpdk base tag (#5211)"
• 325a42cdc fix dpdk base tag (#5211)
• 6e1782f1e base: use local patch files (#5208)
• 460015bae fix underlay subnet kubectl ko trace error (#2773)
• 2539427eb kubectl-ko: fix conntrack state (#5038)
• b3fb9a050 ci: remove legacy network policy e2e (#5037)
• 28c8af1c2 ci: bump aquasecurity/trivy-action to 0.29.0
• 70c8965f8 prepare for next release

Contributors

• Mengxin Liu
• changluyi
• zhangzujian
• 张祖建

• f8079e29e release v1.11.22
• b4e666add fix cve (#5006)
• c0c9fe58e bump go to 1.22.12 (#5008)
• 7add545c8 fix cilium chaining e2e test failure
• 974a23ec5 ignore trivy (#5004)
• b455c7797 fix: kube-ovn-cni always dump-flows br-provider per period (#4971)
• 3fc588c93 controller: consider StatefulSet's start ordinal (#4967)
• 60f3dcbec ci: build arm64 base images on arm64 hosted runners (#4936)
• a8fde894a ci: build arm64 images on arm64 hosted runners (#4936)
• 6b8e67c09 controller: check condition NodeNetworkUnavailable when determining whether node is ready (#4917)
• cc9f56645 cni-server: set node NetworkUnavailable condition after join subnet gateway check (#4915)
• 4cf6035b7 ipam: check subnet's available ipv6 address count (#4903)
• 8a21336d4 bump go to 1.22.10 (#4854)
• be1f189db add release scripts
• a604b5931 prepare for next release

Contributors

• changluyi
• zhangzujian
• 张祖建

• e6a8501d5 release v1.11.21
• 633fbbeb0 team device not set unmanage
• dca168d80 prepare for next release

Contributors

• clyi

• 0a1194ad4 release v1.11.20
• 4e7fb345e fix memory overflow, add mac_binding related options to router (#4610)
• 2c84c60f0 bump go to 1.22.8 (#4584)
• 1cbbf8b87 ci: set trivy db repository to public.ecr.aws/aquasecurity/trivy-db:2 (#4570)
• c5a08fa9c base: rebuild go binary deps from source (#4524)
• 778578460 bump kubectl to v1.30.5
• 9ce2a3e35 bump go to 1.22.7 (#4482)
• 8ae11f5a0 netpol: add allow acl rules for u2o logical gateway (#4420)
• 27d4fc3fd Makefile: simplify underlay u2o installation (#4419)
• 305b2e88c bump go to 1.22.6
• a4041c31a replace protocol check in netpol update (#4358)
• 9e5b64dac fix: empty /var/run/netns (#4360)
• 9056aa03a cni-server: disable udp-fragmentation-offload (#4342)
• a012bb249 bump k8s to v1.27.16 (#4307)
• 4aa87ead4 underlay: set trunks of host nic port (#4282)
• 677aaf6f7 fix ovn lb not updated due to service update failure (#4280)
• 3d4353397 build(deps): bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 (#4275)
• 99d884724 bump k8s to v1.27.15
• b3a52a0bf ci: run go mod tidy before building kubectl (#4274)
• 271a79efa ci: disable cgo when building kubelet and cni plugins (#4268)
• 57c458935 build kubectl and cni plugins from source if vuln found in the base image (#4253)
• 49d053d6f klog: set log file max size to 200MB (#4272)
• aea0ad24f logrotate: set file size limit to 100M (#4271)
• bfe6fb841 remove unused environment variable LOG_ROTATE (#4270)
• 2d0591c00 fix invalid subnet not sync route (#4263)
• 5da304bac fix missing env variable in lb svc e2e
• 8af31b4f7 lb svc: update svc status after configuring nat rules (#4235)
• e0926b018 vpc-nat-gateway: print messgae to stderr (#4237)
• d9f5f668c ci: do not compile fastpath kernel module for centos (#4247)
• c327632e0 prepare for next release

Contributors

• bobz965
• changluyi
• dependabot[bot]
• hzma
• zhangzujian
• 张祖建

• a53ad6633 prepare for next release
• 6001c921e fix ipv6 service ip not added to ovn lb vips due to pod cache not synced (#4223)
• 8067217b3 support to set nic bandwidth and mirror when pod is annotated with DefaultNetworkAnnotation (#4208)
• 054263b44 fix getting service cluster ips (#4206)
• 34dea54ab base: add traceroute
• 2d3cee6cc pinger: reset interface_rx_multicast_packets (#4198)
• 60b298496 base: bump kubectl to v1.30.2 (#4163)
• a984e4554 base: bump cni plugins to v1.5.1 (#4185)
• 15952c63c fix reconcile routes (#4168)
• d3a8296cd ci: bump actions
• 2dcd74596 replace util.DefaultVpc with c.config.ClusterRouter (#2782)
• 76c827b27 prepare for next release

Contributors

• yunsilicon
• zhangzujian
• 张祖建

• 6ee9cb668 set release for 1.11.18
• 9f8d19ed0 ci: fix retrieving docker network subnet/gateway (#4161)
• 312cca60f Drop u2o arp request 1.11 (#4151)
• 00f646ac9 add ovn0 default route (#4127)
• a30e50463 trivy: ignore unfixed CVEs (#4129)
• 094f311d1 bump go to 1.22.4 (#4121)
• 48e97f42c Makefile: run kubectl-ko script when collecting logs (#4100)
• f3411a426 fix: ip can not change spec (#4091)
• 2e59f0f72 remove unused func and parameter (#4090)
• 22d6961d1 fix windows build
• d2fb5bfd8 Add support for Yunsilicon NIC (#4074)
• 3bf87d746 prepare for next release

Contributors

• bobz965
• changluyi
• hzma
• yunsilicon
• zhangzujian
• 张祖建

• c8e258357 set release for 1.11.17
• ad3ddaf41 fix node gc (#4040)
• 7bec212be fix: should update subnet status after change vm subnet (#4061)
• e252ca7f1 ci: build e2e binaries and free disk space on necessary (#4059)
• 497bc6648 crd: add subnet name pattern (#4054)
• 3d0f073f7 remove Makefile.e2e
• 5448eb885 bump k8s to 1.27.14 (#4029)
• e73086549 fix node annotations not updated when initializing the default provider-network (#4030)
• 64accc673 bump gosec to 2.19.0
• ba3536669 fix: close file (#4007)
• 818702117 build(deps): bump actions/cache from 3 to 4
• 04968067a bump go to 1.22.3 (#3989)
• 43e664d28 bump k8s to v1.27.13 (#3966)
• 621026cbd fix index out of range (#3958)
• bfc03b936 fix nil pointer dereference (#3951)
• 14553780a cni-server: set sysctl variables only when the env variables are passed in (#3929)
• cdd65b54c ovn: check whether db file is fixed (#3928)
• da69a41aa 1.11 distinguish portSecurity with security group (#3863)
• 9c45f462c add tracepath (#3884)
• fe2797cd0 ovn: update patch for skipping ct (#3879)
• 8885cd233 prepare for next release

Contributors

• bobz965
• guangwu
• zhangzujian
• 张祖建

• 6b9e393cf set release 1.11.16
• f28babdae fix cves
• bc4cf1aea ci: fix memory leak reporting caused by ovn-controller crashes (#3873)
• e7fc6eac6 Fix the failure to enable multi-network card traffic mirroring for newly created pods (#3805)
• 680ca67c6 fix incorrect variable assignment (#3787)
• 576866b99 if startOVNIC firstly, and setazName secondly, the ovn-ic-db may sync the old azname (#3762)
• bf36c9117 ci: cleanup disk space
• fbbe6e732 Log near err (#3739)
• 08fa8214f ip trigger subnet delete (#3703)
• 65bb2b75e fix some ip can not allocate after released (#3699)
• 1794ab877 Compatible with controller deployment methods before kube-ovn 1.11.16
• d5d4caa47 ovn: do not send direct traffic between lports to conntrack (#3663)
• 6f29efd96 sync master change to 1.11 (#3674)
• 0e98a62db delete cm ovn-ic-config cause crash 1.11 (#3665)
• c0fa3db18 prepare for next release

Contributors

• Changlu Yi
• bobz965
• changluyi
• xieyanker
• zhangzujian
• 张祖建

• 94bdf05d4 set for release 1.11.15
• b783389ea refactor start-ic-db.sh (#3645)
• 84c052017 kube-ovn-monitor and kube-ovn-pinger export pprof path (#3656)
• edf23a757 SYSCTL_IPV4_IP_NO_PMTU_DISC set default to 0
• 7b863fbf3 Ovn ic ecmp enhance 1.11 (#3609)
• 7a5c4aa6d fix: subnet can not delete even if no ip in using (#3621)
• 3fec12e5f fix: static spectify one ip (#3614)
• 6e80f351c do not calculate subnet.spec.excludeIPs as availableIPs (#3612)
• d4967031d update policy route when subnet cidr changed (#3611)
• 6fad3a17d prepare for next release

Contributors

• Changlu Yi
• bobz965
• changluyi
• hzma

• 576301137 set release 1.11.14
• a8f93e76c ovs: increase cpu limit to 2 cores (#3530)
• 9d4ea55c2 fix u2o infinity recycle (#3567)
• ad3e36926 1.11 ip delete lsp (#3562)
• e27aced6f fix ipam deletion (#3549)
• 40db90115 Revert "ovn-central: check raft inconsistency from nb/sb logs (#3532)"
• d30a4cf7b fix IP residue after changing subnet of vm in some scenarios (#3370)
• 407a26f21 ovn-central: check raft inconsistency from nb/sb logs (#3532)
• ca9e530f7 prepare for next release

Contributors

• bobz965
• changluyi
• zhangzujian
• 张祖建
• 袁又袁

• dc24eee77 set release v1.11.13
• 226180e9e cni-server: set sysctl variable net.ipv4.ip_no_pmtu_disc to 1 by default (#3504)
• 57c6a8228 typo (#3495)
• aed1be8ea add iptables drop invalid rst (#3491)
• 97bfd4c29 delete vm's lsp and release ipam.ip (#3476)
• a5063c807 fix: ipam clean all pod nic ip address and mac even if just delete a nic (#3451)
• 1dd86ea2a ovs-healthcheck: ignore error when log file does not exist (#3456)
• a92c08a93 prepare for the next release

Contributors

• bobz965
• changluyi
• zhangzujian
• 张祖建
• 袁又袁

• 7d83392fc set allow-related for gatewayACL and NodePgACL (#3433)
• 5e9c9f9ce bump k8s to v1.26.11 (#3427)
• ec584f442 base: fix ovn build failure (#3340)
• aac2ae266 optimize ecmp policy route (#3421)
• 81e0ec304 trivy: ignore CVE-2023-5528
• 96b62d734 mtu merge failed (#3417)
• c1331e743 fix helm (#3412)
• 1c946022d Supporting user-defined kubelet directory (#2893)
• 67adfd998 add mtu config to release-1.11
• a8960432a fix Vulnerability (#3391)
• 0c74c4e36 add kube-ovn-controller nodeAffinity prefer not on ic gateway
• 070452b0b Revert "upgrade ovs-ovn pod by generation version instead of chart version (#1960)" (#3387)
• 6e0711f3b delete check for existing ip cr (#3361)
• dabe5993f kube-ovn-controller: fix memory growth caused by unused workqueue
• 3adf7195e add compact switch release-1.11 (#3338)
• 49061ce14 add switch for compact (#3336)
• 1fe0a9998 base: fix ovn build failure (#3327)
• 614bdc02d kube-ovn-controller: fix ovn ic log directory not mounted to hostpath (#3322)
• a0e68a40c fix golang lint error (#3323)
• df53f9f2c add type assertion for ip crd (#3311)
• 126f87154 update go net version to v0.17.0 (#3312)
• 4115d87d8 security: ignore kubectl cve (#3305)
• 682f191d1 Revert "update base image to ubuntu:23.10 (#3289)"
• 995b3fc43 update base image to ubuntu:23.10 (#3289)
• a932658fc ovs: load kernel module ip_tables only when it exists (#3281)
• 3858fbefb pinger: increase packet send interval (#3259)

Contributors

• Changlu Yi
• bobz965
• changluyi
• hzma
• zhangzujian
• 张祖建
• 袁又袁
• 马洪贞

• a98b4b107 set for release 1.11.11
• 67010837c fix: for existing nic, no need to set the port type to internal (#3243)
• b183e577e undo delete perl cmd to update release-1.11 image
• 634a99514 update kubectl and delete perl (#3223)
• dabea2d96 fix vpc-peer dualstack bug (#3204)
• 0eb4f7948 fix ipam random get (#3200)
• a71201a48 fix G101
• 58ebea1d9 add err log to help find conflict ip owner (#2939)
• 8246b8b72 underlay: fix ip/route tranfer when the nic is managed by NetworkManager (#3184)
• febb78f82 fix ovn build (#3166)
• 0e12c017e chart: fix ovs-ovn upgrade (#3164)
• cb80f8d90 subnet: fix deleting lr policy on node deletion (#3178)
• eb9bcd583 delete append externalIds process in initIPAM (#3134)
• 3ee977a29 move unnecessary init process after startWorkers (#3124)
• 0857593ce underlay: fix NetworkManager operation (#3147)
• 132660e83 base: remove ovn patch for skipping ct (#3140)
• 6177d38fd delete append externalIds process in initIPAM (#3134)
• 0b305d982 prepare for the next release
• fe4cf9e3b add e2e test for ovn db recover (#3118)
• 896268556 update install.sh

Contributors

• bobz965
• hzma
• 张祖建
• 袁又袁
• 马洪贞

• 7f111db34 ovn: fix corrupted database file on start (#3112)
• a11d7e92d update version to v1.11.10
• 4b56b637d fix u2o policy route generate too many flow tables cause oom
• 935fa9279 distinguish nat ip for central subnet with ecmp and active-standby (#3100)
• 460655c22 bug_fix if only one port bind to the sg, then unbind the port to the sg ,it will not enforce in port_group (#3092)
• 2bd75f0a1 Revert "fix sg"
• 0400c4545 fix sg
• aca169d24 fix .status.default when initializing the default vpc (#3086)
• b2b19014b cni-server: fix ovn mappings for vpc nat gateway (#3075)
• da86070e4 ovn client: fix sb chassis existence check (#3072)
• 998e857df ci: do not pin go version (#3073)
• 8597b9028 ci: fix multus installation (#3062)
• b17174455 ipam: fix ippool with single dual-stack address (#3054)
• c1a8d92a3 fix vpc lb init (#3046)
• 03f94a527 Revert "prepare for next release"
• 28a4888d9 set genev_sys_6081 tx checksum off (#3045)
• 6b0cc730c prepare for next release
• 8ce77f850 fix ifname start with pod (#3038)
• a29d00cc1 static ip in exclude-ips can be allocated normally when subnet's availableIPs is 0 #3031
• 58eef01e4 ci: pin go version to 1.20.5 (#3034)
• 0f3d599bd pinger: use fully qualified domain name (#3032)
• 5400c37d7 uninstall.sh: fix ipset name (#3028)
• c79184159 kube-ovn-controller: fix workqueue metrics (#3011)
• 54a0b1a69 fix subnet finalizer (#3004)
• f3be5d12c choose subnet by pod's annotation in networkpolicy (#2987)
• 2279f621d kubectl ko performance enhance (#2975) (#2994)
• 572a2e851 fix deleting old sb chassis for a re-added node (#2989)
• abda1560c underlay: fix NetworkManager syncer for virtual interfaces (#2988)
• ec17b7358 underlay: does not set a device managed to no if it has VLAN managed by NM (#2986)
• 7db9ff12a bump k8s version to v1.26.6 (#2973)
• cc7768baa base: fix ovn patches (#2972)
• 7829b8737 add detail comment
• c84a9748b Kubectl ko diagnose perf release 1.11 (#2967)
• 6325c83eb cni-server: reconcile ovn0 routes periodically (#2963)
• 6ea123a7b uninstall.sh: flush and delete iptables chain OVN-MASQUERADE (#2961)
• 738c40785 underlay: sync NetworkManager IP config to OVS bridge (#2949)
• d9bab2e23 typo (#2952)
• b931b5bfd Revert "base: fix ovn build failure (#2926)"
• d15874e03 Revert "nm not managed only in the change provide nic name case (#2754)" (#2944)
• 168863cbc kubectl ko perf on release-1.11 (#2945)
• ea5f81a73 controller: fix DHCP MTU when the default network mode is underlay (#2941)
• 6d883dc98 support set the mtu of dhcpv4_options (#2930)
• effc11156 u2o support specify u2o ip on release-1.11 (#2937)
• 94859807c modify lb-svc dnat port error (#2927)

Contributors

• bobz965
• changluyi
• hzma
• yichanglu
• 张祖建
• 袁又袁
• 马洪贞

• d15f003a1 prepare for next release
• 3796d1efb base: fix ovn build failure (#2926)
• 98748f6e9 bump version number to v1.11.8
• 0a0d254dd fix encap_ip will be lost when we restart the ovs-dpdk node (#2543)
• 919c8eebf cni-server: clear iptables mark before doing masquerade (#2919)
• 91b383b0a For eip created without spec.V4ip this field (#2912)
• b8523fc6a match outgoing interface when perform snat (#2911)

Contributors

• 张祖建
• 袁又袁

• 0b27996b1 prepare for release 1.11.7
• b6b024587 underlay: do not delete patch ports created by ovn-controller (#2851)
• bed822993 fix gc report error #2886
• 42a5656c8 add support of user-defined kubelet directory (#2388)
• 4d1b12a8b ci: fix valgrind result analysis (#2853)
• e1b79191c ovs: fix memory leak in qos (#2871)
• 50cc00d0b prepare for next release

Contributors

• zhangzujian
• 夜微澜
• 张祖建
• 马洪贞

• f071a9740 prepare for next release
• 94644e129 u2o support custom vpc release 1.11 (#2849)
• 30f4cc303 kubectl-ko: fix trace when u2oInterconnection is enabled (#2836)
• e50687af3 ci: detect ovs/ovn memory leak (#2839)
• 767e102ac fix underlay access to node through ovn0 (#2846)
• ae226e33c iptables: always do SNAT for access from other nodes to nodeport with external traffic policy set to Local (#2844)
• ef78fee1d delete user tss (#2838)
• 4dd164acd ci: fix no-avx512 image build
• f4033e738 ci: fix kube-ovn-base build
• ea9547700 refactor image builds (#2818)
• ddfedfa17 fix MTU when subnet is using logical gateway (#2834)
• 1346b0e7e update vpc dns env value
• 5d8b106a0 add route for service ip range when init vpc-nat-gw (#2821)
• cd4ff4f6e fix cleanup order (#2792)
• 94e7463e8 add available check for northd enpoint
• f7a80c900 update release note

Contributors

• changluyi
• hzma
• zhangzujian
• 张祖建
• 马洪贞

• 632bad30f prepare for release 1.11.5
• bc4637c04 reorder the deletion to avoid dependency conflict
• a8539c579 fix ip statistics in subnet status (#2769)
• 655d5ff26 support disable arp check ip conflict in vlan provider network (#2760)
• a5720d6f6 cni-server: wait ovs-vswitchd to be running (#2759)
• 8a4e97b54 ci: run kube-ovn e2e for underlay (#2762)
• 87c686831 iptables: use the same mode with kube-proxy (#2758)
• 944f30491 nm not managed only in the change provide nic name case (#2754)
• a55db01d8 update policy route when change from ecmp to active-standby (#2717)
• ba6398247 fix recover db failed using offical doc (#2718)
• 81b60ac84 fix_base_sg_rule (#2401)
• e80879c5e add base sg rules for ports (#2365)
• f90aa3981 bump base images
• abaee01a4 base: remove patch for fixing ofpbuf memory leak (#2715)
• 2e800bf24 prepare for release 1.11.4
• 22367be61 cni-server: do not perform ipv4 conflict detection during VM live migration (#2693)
• 49dfd39ea fix can not clean the last abandoned snat table (#2701)
• 6ec1982a6 replace StrategicMergePatchType with MergePatchType (#2694)
• 320f5670e fix build error by partially revert 951f89c5
• d4eabab03 ovn-controller: do not send GARP on localnet for Kube-OVN ports (#2690)
• 951f89c54 adapt ippool annotation (#2678)
• 96e8be6d6 netpol: fix packet drop casued by incorrect address set deletion (#2677)
• 6b95cecde fix pg set port fail when lsp is already deleted (#2658)
• 5ad2bafe0 add subnetstatus lock for handleAddOrUpdateSubnet (#2669)
• f314ab582 broadcase free arp when pod setup
• e29fdc962 delete sync user (#2629)
• 621423f7d Add ipsec package to image release 1.11 (#2618)
• 9c80381ba ci: deploy multus in thick mode (#2628)
• 2731e8e30 libovsdb: use monitor_cond as the monitor method (#2627)
• 71a8ffe36 ci: fix multus installation (#2622)
• 786fea901 ovs: fix dpif-netlink ofpbuf memory leak (#2620)
• d9647b4d4 update Dockerfile.debug
• 5b099ed27 ci: fix multus installation (#2604)
• fdc2301bd cut invalid OVN_NB_DAEMON to make log more readable (#2601)
• 02b1e140b unittest: fix length assertion (#2597)
• 209246bd9 bump base image
• d2f1a8012 security: remove CVE-2022-29526 from .trivyignore
• 7a69233f8 base: fix CVE-2022-3294 (#2594)
• ea46479db underlay: get address/route before setting nm managed to no (#2592)
• d67d40d39 base: fix ovs patches (#2590)
• ed14bc2d0 ci: bump kind image to v1.26.3 (#2581)
• 9c01b1bd4 move ipam.subnet.mutex to caller (#2571)
• fb70f9393 fix: memory leak in IPAM caused by leftover map keys (#2566)
• f4f990b38 fix ovn-bridge-mappings deletion (#2564)
• e4242a01e fix go mod list (#2556)
• 4c08bfe09 do not set device unmanaged if NetworkManager is not running (#2549)
• 39c99c6ea fix update dnat rules not effect correctly (#2518)
• 7eb7ed6ed underlay: fix network manager operation (#2546)
• 8f67a3245 controller: fix apiserver connection timeout on startup (#2545)
• 4b8654db8 underlay: delete altname after renaming the link (#2539)
• 8d0d56ecb underlay: fix link name exchange (#2516)
• f22535e36 fix changging the stopped vm's subnets, the vm cann't start normally (#2463)
• 5bd71ba8b add kubevirt multus nic lsp before gc process (#2504)
• d9ccaf7b3 update for release v1.11.3

Contributors

• bobz965
• changluyi
• hzma
• yichanglu
• zhangzujian
• 夜微澜
• 张祖建
• 袁又袁
• 马洪贞

• 9fe900fce prepare for release v1.11.3
• d70bf21f9 ensure address label is correct before deleting it (#2487)
• df493a8bd add node to addNodeQueue if required annations are missing (#2481)
• b4145855d fix ips CR not found due to etcd error (#2472)
• 63afc1f6c ci: fix ovn-ic installation (#2456)
• f790d5a12 do not set subnet's vlan empty on failure (#2445)
• 0ff516bbd change cni version from v1.1.1 to v1.2.0
• b0935b7c7 fix ovn-speaker router bug (#2433)
• 7f6ba2b1a fix chart install/upgrade e2e (#2426)
• e0fe08c5f ci: fix cilium chaining e2e (#2391)
• 365e8f47f Modify the pod scheduling of vpcdns (#2420)
• 13c7319f0 fix: python package issues
• 7100e157f update ipv6 security-group remote group name (#2389)
• 909c1b6b1 Fix routeregexp ipv6 (#2395)
• 20cdc9d8f ci: fix ref name check (#2390)
• af25e6adc bump base images
• 064df2513 ci: skip netpol e2e automatically for push events (#2379)
• d5005b74a ci: make path filter more accurate (#2381)
• 0f308f344 fix service dual stack add/del cluster ips not change ovn nb
• 4a70baefa ci: fix path filter for windows build (#2378)
• 37662226d e2e: run specs in parallel (#2375)

Contributors

• Daviddcc
• KillMaster9
• changluyi
• hzma
• jeffy
• yichanglu
• zhangzujian
• 张祖建

• 67fd6efb8 fix CVE-2022-41723
• 354485b38 bump base images
• 5b58c8f89 fix: ovs-ovn should reboot now (#2298)
• eae134e93 ci: fix default branch test (#2369)
• ef6c1cd6b fix github actions workflows (#2363)
• 8bb647daf simplify github actions workflows (#2338)
• 8e8417ccc Fixed iptables creation failure due to an excessively long label (#2366)
• 50059147f Improve webhook (#2278)
• 0f8c04e98 eip status状态切换缓慢 (#2256)
• 5603a98f2 fix vip create (#2245)
• 8fc8e0cee improve webhook functions for vpc and subnet (#2241)
• 9cc91bbb8 fix webhook (#2236)
• 3b8da6adf use existing node switch cidr instead of the configured one (#2359)
• 87b8bdec9 Release 1.11 merge netpol (#2361)
• 578b39219 Release 1.11 merge netpol (#2355)
• 14a8b9bb7 prepare for 1.11.2
• 965207213 do not remove link local route on ovn0 (#2341)
• f83af7443 fix encap ip when the tunnel interface has multiple addresses (#2340)
• 746e5d0a8 enqueue endpoint when handling service add event (#2337)
• 3e9d928b3 Add neighbor-address format check for kube-ovn-speaker (#2335)
• f7156c9dc OVN LB: add support for SCTP protocol (#2331)
• 354fd4008 fix getting service backends in dual-stack clusters (#2323)
• 1fe492d57 fix github actions workflow
• 0133c48f7 perform the gateway check but ignore the result when the annotation of subnet is ‘disableGatewayCheck=true’ to make sure of the first network packet (#2290)
• a5cce7443 Add the bgp router-id format check (#2316)

Contributors

• KillMaster9
• changluyi
• jeffy
• lut777
• qiutingjun
• zhangzujian
• 张祖建

• 1008299a7 prepare for release v1.11.1
• 3c0f64bcf fix: ovnic del old AZ after establish the new as name (#2229)
• 57f2c17d3 fix u2o code err
• cd3c333f6 fix kube-ovn-controller crash on startup (#2305)
• 8c4b917f1 fix Makefile
• cdcd9a9ca delete htb qos priority (#2288)
• 602ee37d2 fix gosec ci installation (#2295)
• b367218b5 ovn northd: fix connection inactivity probe (#2286)
• b90b552ad fix ct new config error
• a6663031b fix network break on kube-ovn-cni startup (#2272)
• 22ff73531 fix setting mtu for ovs internal port (#2247)
• 4f957c6a2 fix gosec installation
• 5ed45f38d fix ovn patches
• 1eedbb165 ovn db: add support for listening on pod ip (#2235)
• 996faa1f3 Revert "prepare for next release"
• 0bf23975b prepare for next release

Contributors

• changluyi
• lut777
• zhangzujian
• 张祖建
• 马洪贞