Project: Antrea (Runtime / Cloud Native Network)
File: CHANGELOG-1.8.md

Add OVS connection check to Agent's liveness probes for self-healing on OVS disconnection. (, [@tnqn]) Upgrade Antrea base image to ubuntu:22.04. ( , [@antoninbas]) Ensure NO_FLOOD is always set for IPsec tunnel ports and TrafficControl ports. ( , [@xliuxu] [@tnqn]) Fix Service routes being deleted on Agent startup on Windows. (, [@hongliangl]) Fix route deletion for Service ClusterIP and LoadBalancerIP when AntreaProxy is enabled. (, [@tnqn]) Add a periodic job to rejoin dead Nodes to fix Egress not working properly after long network downtime. (, [@tnqn]) Fix Agent crash in dual-stack clusters when any Node is not configured with an IP address for each address family. (, [@hongliangl]) Fix potential deadlocks and memory leaks of memberlist maintenance in large-scale clusters. (, [@wenyingd]) Fix connectivity issues caused by MAC address changes with systemd v242 and later. (, [@wenyingd]) Fix OpenFlow rules not being updated when Multi-cluster Gateway updates. (, [@luolanzone]) Set no-flood config with ports for TrafficControl after Agent restarting. (, [@hongliangl]) Fix packet resubmission issue when AntreaProxy is enabled and AntreaPolicy is disable. (, [@GraysonWu]) Fix data race when Multi-cluster controller reconciles ServiceExports concurrently. (, [@Dyanngg]) Fix multicast group not removed from cache when it is uninstalled. (, [@wenyingd]) Fix nil pointer error when there is no ClusterSet found during MemberClusterAnnounce validation. (, [@luolanzone]) Remove redundant Openflow messages when syncing an updated group to OVS. (, [@hongliangl]) Add ExternalNode feature which enables Antrea to manage security policies for non-Kubernetes Nodes (like virtual machines or bare-metal servers). (, [@wenyingd] [@mengdie-song] [@Anandkumar26]) It introduces the ExternalNode CRD; each resource of this kind represents a virtual machine or bare-metal server and supports specifying which network interfaces on the external Node are expected to be protected with Antrea-native policies. An ExternalEntity resource will be created for each network interface specified in the ExternalNode resource. Antrea-native policies are applied to an external Node by using the ExternalEntity selector. Refer to for more information about this feature. Add the following capabilities to Antrea-native policies: Add Audit Logging support for K8s Networkpolicy. (, [@qiyueyao]) Support applying Antrea ClusterNetworkPolicy to NodePort Services for securing ingress traffic. (, [@GraysonWu]) Introduce the Group CRD to logically group different network endpoints and reference them together in Antrea NetworkPolicy. (, [@qiyueyao] [@abhiraut]) Release new Antrea Helm chart version for each Antrea release. ( , [@antoninbas] [@yanjunz97]) Refer to for Helm installation method. (, [@antoninbas]) Support TopologyAwareHints in AntreaProxy. (, [@hongliangl]) Add encap mode support for the Multicast feature. (, [@wenyingd]) Support configurable Geneve, VXLAN, or STT port number for encap

(, [@Jexf]) Add Status field to the IPPool CRD: it is used to report usage information for the pool (total number of IPs in the pool and number of IPs that are currently assigned). ( , [@ksamoray] [@tnqn]) Support updating configuration at runtime for flow-aggregator via antctl or by updating the ConfigMap. (, [@yuntanghsu]) Add antctl commands to set up and delete Multi-cluster ClusterSet. (, [@hjiajing]) Add to set up Multi-cluster ClusterSet with antctl. (, [@jianjuns]) Antrea now uses OpenFlow 1.5 to program OVS. (, [@wenyingd] [@ashish-varma]) Rename Windows script Start.ps1 to Start-AntreaAgent.ps1, and rename Stop.ps1 to Stop-AntreaAgent.ps1. (, [@wenyingd]) Unify NodePortLocal behavior across Linux and Windows. Linux agents now support allocating different Node ports for different protocols even when the Pod port number is the same. (, [@XinShuYang]) Antrea IPAM now uses the name of the uplink interface to name the host internal port, and the uplink interface will be renamed with a `~` suffix, e.g. `eth0~`. (, [@gran-vmv]) Send Neighbor Advertisement messages after creating Pods in an IPv6 cluster. (, [@gran-vmv]) Add an output formatter "raw" to better display multi-line string responses for antctl. (, [@Atish-iaf]) Add new ports to network requirement doc. (, [@luolanzone]) Windows OVS installation script now installs required SSL library if missing. (, [@XinShuYang]) Upgrade whereabouts CNI to v0.5.4 and provide required pluginArgs when invoking the CNI binary. (, [@arunvelayutham]) Remove Grafana flow collector files in the Antrea repo (as they were moved to the Theia repo). (, [@dreamtalen]) Make the following changes to the Multi-cluster feature: Add columns of kubectl outputs for Multi-cluster custom resources. (, [@jianjuns]) Use hostNetwork for Multi-cluster controller. (, [@luolanzone]) Update ClusterClaim CRD to v1alpha2. (, [@bangqipropel]) Update GatewayIPPrecedence to support the "external/internal" options. (, [@luolanzone]) Disable metrics API and change the health binding address port to 8080. (, [@luolanzone]) Improve CRD validation. ( , [@luolanzone]) Auto create MemberClusterAnnounce and update ClusterSet in leader cluster for each member cluster. ( , [@hjiajing] [@luolanzone]) Add Multi-cluster Gateway descriptions in the Multi-cluster architecture document. ( , [@luolanzone] [@jianjuns]) Fix reconnection issue between Agent and OVS. (, [@wenyingd]) Fix the wrong DNAT IP used by AntreaProxy for serving NodePort traffic on Windows Nodes. (, [@XinShuYang]) Fix Antrea Octant plugin build. (, [@antoninbas]) Fix Pod-to-external traffic on EKS in policyOnly mode. (, [@antoninbas]) Fix problems caused by Node restart on EKS in policyOnly mode. ( , [@antoninbas]) Fix race conditions in NetworkPolicyController. (, [@tnqn]) Fix FlowExporter memory bloat when export process is dead. (, [@wsquan171]) Fix socket leak in an IPv6 cluster. (, [@wenyingd]) Fix ClickHouse client race during batch commit. (, [@wsquan171]) Retry when retrieval of PodCIDRs fails to avoid Agent crash due to the delay in allocating PodCIDRs for the Node. (, [@ksamoray]) Fix nil pointer issue when ClusterSet is deleted in leader cluster. (, [@luolanzone]) Clean up ResourceExport if the exported Service has no available Endpoints. (, [@luolanzone])