v1.12.23

v1.12.23 (2024-09-18)

• 9f890e76 release v1.12.23
• 65312b28 bump multus to v4.1.1 (#4532)
• e98cc197 bump k8s to v1.30.5 (#4513)
• 2e1887d9 bump go to 1.22.7 (#4482)
• 78b72798 update Makefile (#4472)
• 82201941 tproxy: support named port (#4487)
• 723e8b3c fix: arping reply may duplicate (#4477)
• cbbe10ab Enable inactivity check on ovndb connection (#4006)
• 0d8c1a9e support vip dual stack (#3617)
• 2960014e metrics: do not export information if a subnet is not validated (#4444)
• 810d6dbc prepare for next release

Contributors

• Mengxin Liu
• fanriming
• zhangzujian
• 张祖建

v1.12.22

v1.12.22 (2024-08-29)

• 61870105 release v1.12.22
• 820d95d0 vpc-nat-gateway: use iptables-legacy for centos 7 (#4428)
• b2b55a1c netpol: add allow acl rules for u2o logical gateway (#4420)
• 1ecbd591 Makefile: simplify underlay u2o installation (#4419)
• b2e6a7a5 vpc-nat-gateway: do not add routes for underlay subnets (#4416)
• c03dfd2e cni-server: fix failure in ipv6/dual clusters running in docker (#4417)
• 786eb0ab add acl log annotation (#4414)
• 6d066646 bump k8s to v1.30.4 (#4410)
• 1827b650 fix kube-ovn-cni run fail on docker (#4406)
• ebd55782 prepare for next release

Contributors

• changluyi
• hzma
• zhangzujian
• 张祖建

v1.12.21

v1.12.21 (2024-08-14)

• 40ef8d6b release v1.12.21
• d4692dfe increase health probe timeout (#4397)
• 909991a3 cni-server: do not set sysctl variables (#4395)
• 912177f3 fix ovs patch
• cf95de51 prepare for next release

Contributors

• 张祖建

v1.12.20

v1.12.20 (2024-08-13)

• 918652d6 release v1.12.20
• b867a33f increase the default probe interval for large cluster
• 1562b228 install.sh: add option SECURE_SERVING
• 87e75659 fix EOF during TLS handshake caused by health check (#4381)
• 39980fb0 fix controller-runtime logger not set (#4380)
• fa2316a9 bump go to 1.22.6 (#4373)
• fe218b09 replace protocol check in netpol update (#4356)
• 3133267c build(deps): bump github.com/prometheus-community/pro-bing (#4339)
• 541d5f45 cni-server: disable udp-fragmentation-offload (#4342)
• 258408ec build(deps): bump github.com/onsi/gomega from 1.34.0 to 1.34.1 (#4350)
• a9784c7b build(deps): bump github.com/onsi/ginkgo/v2 from 2.19.0 to 2.19.1 (#4340)
• 7c503107 build(deps): bump github.com/onsi/gomega from 1.33.1 to 1.34.0 (#4341)
• 642c2fc7 build(deps): bump github.com/docker/docker (#4336)
• 756c47a7 build(deps): bump github.com/containernetworking/cni from 1.2.2 to 1.2.3 (#4328)
• 341ff27f build(deps): bump github.com/docker/docker (#4327)
• 2e76fe9c pinger: fix process not terminated on sigkill (#4329)
• 7719ce57 fix: scripts (#4291)
• 4e39bd85 fix dialing https server (#4324)
• 8cd578c6 refactor metrics (#4313)
• e0d1dbdb bump k8s to v1.30.3 (#4317)
• 68797a10 metrics: fix missing rbac for sa ovn (#4312)
• 10781730 metrics: add support for secure serving (#4297)
• b5772112 security: run as unprivileged (#3040)
• 3e52a0ee bump k8s to v1.27.16 (#4306)
• b88ed8d2 fix map concurrent read and write crash (#4302)
• 2ded787a use route policy to reimplement northGateway
• 69befe33 underlay: set trunks of host nic port (#4282)
• 79cf2098 fix using route table name as vpc name
• bf5a554e fix: set dhcp gateway to U2OInterconnectionIP when enabling dhcp and u2o (#4228)
• 54aa76f0 fix ovn lb not updated due to service update failure (#4280)
• e4b4142c build(deps): bump aquasecurity/trivy-action from 0.23.0 to 0.24.0 (#4275)
• 0691a894 prepare for next release

Contributors

• Mengxin Liu
• Zhao Congqi
• dependabot[bot]
• hzma
• zhangzujian
• 张祖建

v1.12.19

v1.12.19 (2024-07-10)

• 93095c8c release v1.12.19
• cbddeea4 update .trivyignore
• d8b4a77c ci: run go mod tidy before building kubectl (#4274)
• 1dc25c44 ci: disable cgo when building kubelet and cni plugins (#4268)
• a66dbff1 build kubectl and cni plugins from source if vuln found in the base image (#4253)
• 39cfac4f ignore cve CVE-2024-24791
• 4877acde bump go version
• 1b16809c enable nat gw by default (#4273)
• 1e53391e ipam: fix ip not released for non-ovn subnets (#4265)
• f151e32e klog: set log file max size to 200MB (#4272)
• c2e5a061 logrotate: set file size limit to 100M (#4271)
• 05eb0e16 remove unused environment variable LOG_ROTATE (#4270)
• 331006f7 when router is deleted return success for static route deletion (#4266)
• b16adb60 fix vpcnatgw image is not synced (#4264)
• f5693467 build(deps): bump golang.org/x/sys from 0.21.0 to 0.22.0 (#4257)
• 38db3cf8 build(deps): bump golang.org/x/mod from 0.18.0 to 0.19.0 (#4256)
• d4745139 build(deps): bump github.com/osrg/gobgp/v3 from 3.27.0 to 3.28.0 (#4244)
• 5d16919c do not create iptables rule for setting tcp mss (#4260)
• c12c5722 fix invalid subnet not sync route (#4262)
• 7743d666 update node name label for ip resources (#4242)
• c69f9d43 lb svc: update svc status after configuring nat rules (#4235)
• d7b160d5 vpc-nat-gateway: print messgae to stderr (#4237)
• 217ea26a check both sts name and UID when handling pod deletion (#4238)
• 35563ed5 do not exit if chassis is not found (#4246)
• d4002b81 ci: do not compile fastpath kernel module for centos (#4247)
• 03ce5a32 update node labels/annotations by json merge patch (#4230)
• c893f524 fix ipv6 service ip not added to ovn lb vips due to pod cache not synced (#4223)
• 6c467fa6 ic: ensure db file is fixed (#4211)
• 194e6155 base: clean ipset deb files (#4215)
• b1b7d3b1 fix getting service cluster ips (#4206)
• 8761e3c6 fix: nil pointer when subnet is not ready (#4190)
• 8708c722 base: add traceroute
• 289c5526 prepare for next release

Contributors

• Mengxin Liu
• Zhao Congqi
• changluyi
• dependabot[bot]
• zhangzujian
• 张祖建

v1.12.18

v1.12.18 (2024-06-21)

• 8186a8a2 release v1.12.18
• 65641d31 fix vm not running after changing the subnet (#4199)
• 10cd0ce6 pinger: reset interface_rx_multicast_packets (#4198)
• 05e2ccb5 fix kube-ovn-cni crash for newly added nodes , due to old legacy event in deleteNodeQueue (#4194)
• ff0a7c53 base: bump cni plugins to v1.5.1 (#4185)
• 4a662e22 ci: check pod crashes on installation/e2e failure (#4160)
• b7bf4926 base: bump kubectl to v1.30.2 (#4163)
• 342a2ab8 fix reconcile routes (#4168)
• 8965ecce ci: fix retrieving docker network subnet/gateway (#4161)
• 63b33691 prepare for next release

Contributors

• changluyi
• 张祖建

v1.12.17

v1.12.17 (2024-06-13)

• 2b643c97 release v1.12.17
• 19f91543 Drop u2o arp request 1.12 (#4150)
• e84ab121 add ovn0 default route (#4127)
• acab364f distinguish-portSecurity-with-security-group (#4134)
• e53db6ed fix ipam subnet concurrent map iteration and map write (#4126)
• 9e8c5eeb trivy: ignore unfixed CVEs (#4129)
• f266b4eb bump go to 1.22.4 (#4121)
• 9077beb5 build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0 (#4118)
• 627c4213 build(deps): bump github.com/osrg/gobgp/v3 from 3.26.0 to 3.27.0 (#4119)
• b496e60e fix: IP Add/Sub overflow or underflow (#4111)
• 7b4ff3ab add enable multicast snoop to 1.12 (#4105)
• 2286ffa5 fix: remove change vm subnet directly (#4102)
• b4f54daf Makefile: run kubectl-ko script when collecting logs (#4100)
• 64d1e1cd install.sh: waiting for deleted kube-ovn-pinger to disapper (#4096)
• cde29e90 fix mac conflict (#4095)
• 4fe44ab3 fix: add static route for custom vpc when create subnet with (#3462)
• 2d667f5b fix: add ip_reserved label for vip (#4093)
• a874aaf7 install.sh: wait for all kube-ovn-pinger pods to be ready (#4082)
• d2e3bf65 ci: print all the previous logs for restarted pods (#4081)
• f271a54d opt: replace ovn-sbctl with ovsdb-client (#4075)
• 2653759a ovs: get controllerrevision with option --ignore-not-found (#4058)
• e0908bfb fix exit on error (#4080)
• 6d7ed5d0 delete lease on cleanup (#4079)
• fcde92c1 base: aoivd unnecessary env variables (#4070)
• 38fcd9e1 ci: downgrade node image to v1.29.2 (#4069)
• b1237f9a fix crypto/rand: argument to Int is <= 0 (#4077)
• e82c4278 fix backport (#4066)
• 1ba289cb fix: should update subnet status after change vm subnet (#4061)
• de09d72b ci: build e2e binaries and free disk space on necessary (#4059)
• 94c22af4 crd: add subnet name pattern (#4054)
• f69625d1 fix assignment to entry in nil map (#3925)
• 623c6287 add release cleanup
• 81b8a9de prepare for next release

Contributors

• Mengxin Liu
• Zhao Congqi
• bobz965
• changluyi
• dependabot[bot]
• fanriming
• hzma
• xujunjie-cover
• zhangzujian
• 张祖建

v1.12.16

v1.12.16 (2024-05-20)

• dff82c4f release v1.12.16
• 3957427d wait for all pods to be deleted before deleting serviceaccount/clusterrole/clusterrolebinding (#4035)
• b7727988 uninstall.sh: delete OVN-POSTROUTING rule in mangle table (#4034)
• 3cb62914 cleanup.sh: remove sa/clusterrole/clusterrolebinding (#4024)
• 70d33bef do not use exec for start scripts with trap quit EXIT (#4025)
• 93e31377 bump k8s to 1.27.14 (#4029)
• 85009d5e fix node annotations not updated when initializing the default provider-network (#4030)
• 4de2e094 fix container args (#4020)
• 2e700adc fix lsp not updated correctly when logical switch is changed (#4015)
• edee1e54 base: set entrypoint to dumb-init (#4018)
• 03834d80 fix: Resolved the hidden issue with zombie processes (#4004)
• fcfc0995 simplify file reading (#4010)
• d8c8f8ac prepare for next release

Contributors

• fanriming
• 张祖建

v1.12.15

v1.12.15 (2024-05-13)

• ad084913 release v1.12.15
• 505c041d fix lsp not updating addresses (#4011)
• 8d4738c4 bump gosec to 2.19.0
• be8def37 fix: close file (#4007)
• b47f2cef fix node gc (#3992)
• 2b5be24b bump go to 1.22.3 (#3989)
• 6df85a02 build(deps): bump google.golang.org/protobuf from 1.34.0 to 1.34.1 (#3981)
• ad9ee088 build(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0 (#3980)
• e77634df prepare for next release

Contributors

• dependabot[bot]
• guangwu
• zhangzujian
• 张祖建

v1.12.14

v1.12.14 (2024-05-07)

• 8461d381 release v1.12.14
• 99fda1ef ignore CVEs in CNI plugins
• 70871e72 ipam: fix IPRangeList clone (#3979)
• 12b85e50 remove unused e2e test cases (#3968)
• fd2874a9 chart: fix kubeVersion to allow for patterns that match sub versions (#3975)
• 4b2d5cba prepare for next release

Contributors

• Joachim Hill-Grannec
• zhangzujian
• 张祖建