Project: Antrea (Runtime / Cloud Native Network)
File: CHANGELOG-1.5.md

Fix export/import of Services with named ports when using the Antrea Multi-cluster feature. (, [@luolanzone]) Fix handling of the "reject" packets generated by the Antrea Agent to avoid infinite looping. (, [@GraysonWu]) Fix DNS resolution error of Antrea Agent on AKS by using `ClusterFirst` dnsPolicy. (, [@tnqn]) Fix tolerations for Pods running on control-plane for Kubernetes >= 1.24. (, [@xliuxu]) Reduce permissions of Antrea Agent ServiceAccount. (, [@xliuxu]) Fix NetworkPolicy may not be enforced correctly after restarting a Node. (, [@tnqn]) Fix antrea-agent crash caused by interface detection in AKS/EKS with NetworkPolicyOnly mode. (, [@wenyingd]) Fix locally generated packets from Node net namespace might be SNATed mistakenly when Egress is enabled. (, [@tnqn]) Use iptables-wrapper in Antrea container. Now antrea-agent can work with distros that lack the iptables kernel module of "legacy" mode (ip_tables). (, [@antoninbas]) Reduce permissions of Antrea ServiceAccount for updating annotations. (, [@tnqn]) Fix NodePort/LoadBalancer Service cannot be accessed when externalTrafficPolicy changed from Cluster to Local with proxyAll enabled. (, [@hongliangl]) Fix initial egress connections from Pods may go out with node IP rather than Egress IP. (, [@tnqn]) Fix NodePort Service access when an Egress selects the same Pod as the NodePort Service. (, [@hongliangl]) Fix ipBlock referenced in nested ClusterGroup not processed correctly. (, [@Dyanngg]) Add Antrea Multi-cluster feature which allows users to export and import Services and Endpoints across multiple clusters within a ClusterSet, and enables inter-cluster Service communication in the ClusterSet. (, [@luolanzone] [@aravindakidambi] [@bangqipropel] [@hjiajing] [@Dyanngg] [@suwang48404] [@abhiraut]) [Alpha] Refer to [Antrea Multi-cluster Installation] to get started Refer to [Antrea Multi-cluster Architecture] for more information regarding the implementation Add support for multicast that allows forwarding multicast traffic within the cluster network (i.e., between Pods) and between the external network and the cluster network. ( , [@wenyingd] [@ceclinux] [@XinShuYang]) [Alpha - Feature Gate: `Multicast`] In this release the feature is only supported on Linux Nodes for IPv4 traffic in `noEncap` mode Add support for IPPool and IP annotations on Pod and PodTemplate of Deployment and StatefulSet in AntreaIPAM mode. ( , [@gran-vmv] [@annakhm]) IPPool annotation on Pod has a higher priority than the IPPool annotation on Namespace A StatefulSet Pod's IP will be kept after Pod restarts when the IP is allocated from IPPool Refer to [Antrea IPAM Capabilities] for more information Add support for SR-IOV secondary network. Antrea can now create secondary network interfaces for Pods using SR-IOV VFs on bare metal Nodes. (, [@arunvelayutham]) [Alpha - Feature Gate: `SecondaryNetwork`] Add support for allocating external IPs for Services of type LoadBalancer from an ExternalIPPool. ( [@Shengkai2000]) [Alpha - Feature Gate: `ServiceExternalIP`] Add support for antctl in the flow aggregator

(, [@yanjunz97]) Support `antctl log-level` for changing log verbosity level Support `antctl get flowrecords [-o json]` for dumping flow records Support `antctl get recordmetrics` for dumping flow records metrics Add support for the "Pass" action in Antrea-native policies to skip evaluation of further Antrea-native policy rules and delegate evaluation to Kubernetes NetworkPolicy. (, [@Dyanngg]) Add user documentation for using Project Antrea with , [@qiyueyao]) Add user documentation for , [@jianjuns]) Improve , [@antoninbas]) Document how to run Antrea e2e tests on an existing K8s cluster (, [@xiaoxiaobaba]) Make LoadBalancer IP proxying configurable for AntreaProxy to support scenarios in which it is desirable to send Pod-to-ExternalIP traffic to the external LoadBalancer. (, [@antoninbas]) Add `startTime` to the Traceflow Status to avoid issues caused by clock skew. (, [@antoninbas]) Add `reason` field in antctl traceflow command output. (, [@Jexf]) Validate serviceCIDR configuration only if AntreaProxy is disabled. (, [@wenyingd]) Improve configuration parameter validation for NodeIPAM. (, [@tnqn]) More comprehensive validation for Antrea-native policies. ( , [@GraysonWu] [@tnqn]) Update Antrea Octant plugin to support Octant 0.24 and to use the Dashboard client to perform CRUD operations on Antrea CRDs. (, [@antoninbas]) Omit hostNetwork Pods when computing members of ClusterGroup and AddressGroup. (, [@Dyanngg]) Support for using an env parameter `ALLOWNOENCAPWITHOUTANTREA_PROXY` to allow running Antrea in noEncap mode without AntreaProxy. (, [@Jexf] [@WenzelZ]) Move throughput calculation for network flow visibility from logstash to flow-aggregator. (, [@heanlan]) Add Go version information to full version string for Antrea binaries. (, [@antoninbas]) Improve kind-setup.sh script and Kind documentation. (, [@antoninbas]) Enable Go benchmark tests in CI. (, [@wenqiq]) Upgrade Windows OVS version to 2.15.2 to pick up some recent patches. (, [@lzhecheng]) [Windows] Remove HNSEndpoint only if infra container fails to create. (, [@lzhecheng]) [Windows] Use OVS Port externalIDs instead of HNSEndpoint to cache the externalIDS when using containerd as the runtime on Windows. (, [@wenyingd]) [Windows] Reduce network downtime when starting antrea-agent on Windows Node by using Windows management virtual network adapter as OVS internal port. (, [@wenyingd]) [Windows] Fix error handling of the "Reject" action of Antrea-native policies when determining if the packet belongs to Service traffic. (, [@GraysonWu]) Make the "Reject" action of Antrea-native policies work in AntreaIPAM mode. (, [@GraysonWu]) Set ClusterGroup with child groups to `groupMembersComputed` after all its child groups are created and processed. (, [@Dyanngg]) Fix status report of Antrea-native policies with multiple rules that have different AppliedTo. (, [@tnqn]) Fix typos and improve the example YAML in antrea-network-policy doc. (, , [@antoninbas] [@Jexf] [@tnqn]) Fix duplicated attempts to delete unreferenced AddressGroups when deleting Antrea-native policies. (, [@Jexf]) Add retry to update NetworkPolicy status to avoid error logs. (, [@Jexf]) Fix NetworkPolicy resources dump for Agent's supportbundle. (, [@antoninbas]) Use go 1.17 to build release assets. (, [@antoninbas]) Restore the gateway route automatically configured by kernel when configuring IP address if it is missing. (, [@antoninbas]) Fix incorrect parameter used to check if a container is the infra container, which caused errors when reattaching HNS Endpoint. (, [@XinShuYang]) [Windows] Fix gateway interface MTU configuration error on Windows. (, @[lzhecheng]) [Windows] Fix initialization error of antrea-agent on Windows by specifying hostname explicitly in VMSwitch commands. (, [@XinShuYang]) [Windows]