Project: Kube-OVN (Runtime / Cloud Native Network)
File: CHANGELOG.md

release v1.12.15 fix lsp not updating addresses (#4011) bump gosec to 2.19.0 fix: close file (#4007) fix node gc (#3992) bump go to 1.22.3 (#3989) build(deps): bump google.golang.org/protobuf from 1.34.0 to 1.34.1 (#3981) build(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0 (#3980) prepare for next release dependabot[bot] guangwu zhangzujian * release v1.12.14 ignore CVEs in CNI plugins ipam: fix IPRangeList clone (#3979) remove unused e2e test cases (#3968) chart: fix kubeVersion to allow for patterns that match sub versions (#3975) prepare for next release Joachim Hill-Grannec zhangzujian * release v1.12.13 bump k8s to v1.27.13 (#3963) fix subnet check ip in using to avoid ipam init (#3964) add patch permission for cni clusterrole fix index out of range (#3958) fix nil pointer dereference (#3951) fix: lower camel case (#3942) prepare for next release Zhao Congqi bobz965 * release v1.12.12 drop both IPv4 and IPv6 traffic in networkpolicy drop acl (#3940) update net package version (#3936) add metric for subnet info (#3932) cni-server: set sysctl variables only when the env variables are passed in (#3929) ovn: check whether db file is fixed (#3928) fix backport (#3924) append filepath when compare cni config (#3923) re calculate subnet using ips while inconsistency detected (#3920) update ovn monitor (#3903) add monitor for sysctl para (#3913) refactor kubevirt vm e2e (#3914) support specifying routes when providing IPAM for other CNI plugins (#3904) Fix init sg (#3890) distinguish portSecurity with security group (#3862) fix br-external not init because of no permission after ovn-nat-gw configmap created (#3902) build(deps): bump google.golang.org/grpc from 1.63.0 to 1.63.2 (#3900) build(deps): bump github.com/osrg/gobgp/v3 from 3.24.0 to 3.25.0 (#3897) build(deps): bump golang.org/x/sys from 0.18.0 to 0.19.0 (#3896) build(deps): bump golang.org/x/mod from 0.16.0 to 0.17.0 (#3895) build(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.0 (#3898) build(deps): bump github.com/Microsoft/hcsshim from 0.12.1 to 0.12.2 (#3891) build(deps): bump github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0 (#3875) chart: fix ovs-ovn update strategy (#3887) Fix index out of range in controller security_group (#3845) fix: ipam invalid memory address or nil pointer dereference (#3889) add tracepath (#3884) prepare for next release Longchuanzheng Zhao Congqi bobz965 dependabot[bot] hzma zhangzujian * release v1.12.11 change northd probe interval to 5s (#3882) fix go fmt ovn: reduce down time during upgrading from version 21.06 (#3881) compile binaries with debug symbols for debug images (#3871) ovn: update patch for skipping ct (#3879) ci: fix memory leak reporting caused by ovn-controller crashes (#3873) Update dependencies in go.mod file prepare for next release changluyi zhangzujian * release v1.12.10 fix: when give ipv4 cidr ipv6 gateway, the gateway will extend infinitely (#3860) prepare for next release changluyi release v1.12.9 chart: fix missing ENABLE_IC (#3851) fix: cleanup.sh (#3569) exclude vip as encap ip (#3855) fix: duplicate ip deletion (#3589) iptables: reject access to invalid service port only for TCP (#3843) Fix 1.12 ipam deletion (#3554) delete lsp and ipam with ip (#3540) update protobuf module (#3841) kubectl-ko: fix subnet diagnose failure (#3808) pinger: do not setup metrics if disabled (#3806) Fix the failure to enable multi-network card traffic mirroring for newly created pods (#3805) Makefile: add target kind-install-metallb (#3795) build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0 (#3792) build(deps): bump golang.org/x/mod from 0.15.0 to 0.16.0 (#3793) Refactor build-go targets to use the -trimpath flag fix incorrect variable assignment (#3787) prepare for next release bobz965 changluyi dependabot[bot] hzma xieyanker zhangzujian * release v1.12.8 update release.sh prepare for next release release v1.12.7 fix sts pod's logical switch port do not update externa_id vendor and ls (#3778) update dependence update release.sh update release.sh refactor ovn clusterrole (#3755) prepare for next release changluyi hzma release

if startOVNIC firstly, and setazName secondly, the ovn-ic-db may sync the old azname (#3759) (#3763) modify chart.yaml version add action for build base prepare for next release changluyi release v1.12.5 ci: bump github actions ci: bump azure/setup-helm to v4.0.0 (#3743) base: install libmnl0 instead of libmnl-dev (#3745) ci: collect ko logs for all kind clusters (#3744) ci: fix ovn ic log file name (#3742) ci: bump kind and node image update chart relase action workflow (#3728,#3734,#3691) (#3738) remove invalid ovs build option (#3733) dpdk: remove unnecessary ovn patch (#3736) Fix: Resolve issue with skipped execution of sg annotations (#3700) fix: all gw nodes (#3723) ovn: remove unnecessary patch (#3720) ci: fix artifact upload bump k8s to v1.27.10 (#3693) fix backport (#3697) remove unused (#3696) kube-ovn-controller: remove unused codes (#3692) remove fip controller (#3684) build(deps): bump github.com/osrg/gobgp/v3 from 3.22.0 to 3.23.0 (#3688) Compatible with controller deployment methods before kube-ovn 1.11.16 (#3677) set after genevsys6081 started (#3680) ovn: add nb option version_compatibility (#3671) Makefile: fix install/upgrade chart (#3678) ovn: do not send direct traffic between lports to conntrack (#3663) ovn-ic-ecmp refactor 1.12 (#3637) build(deps): bump google.golang.org/grpc from 1.60.1 to 1.61.0 (#3669) fix 409 (#3662) fix nil pointer (#3661) chart: fix parsing image tag when the image url contains a port (#3644) ovs: reduce cpu utilization (#3650) kube-ovn-monitor and kube-ovn-pinger export pprof path (#3657) build(deps): bump github.com/onsi/gomega from 1.30.0 to 1.31.0 (#3641) build(deps): bump actions/cache from 3 to 4 (#3643) build(deps): bump github.com/onsi/ginkgo/v2 from 2.14.0 to 2.15.0 (#3642) SYSCTLIPV4IPNOPMTU_DISC set default to 0 build(deps): bump github.com/evanphx/json-patch/v5 from 5.7.0 to 5.8.0 (#3628) chart: fix ovs-ovn upgrade (#3613) build(deps): bump github.com/emicklei/go-restful/v3 (#3619) build(deps): bump github.com/emicklei/go-restful/v3 (#3606) update policy route when subnet cidr is changed (#3587) update ipset to v7.17 (#3601) ovs: increase cpu limit to 2 cores (#3530) build(deps): bump github.com/osrg/gobgp/v3 from 3.21.0 to 3.22.0 (#3603) do not count ips in excludeIPs as available and using IPs (#3582) fix security issue (#3588) ovn0 ipv6 addr gen mode set 0 (#3579) fix: add err log (#3572) build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 (#3571) Makefile: fix kwok installation (#3561) fix u2o infinity recycle do not calculate subnet.spec.excludeIPs as availableIPs (#3550) add np prefix to networkpolicy name when networkpolicy's name starts with number (#3551) fix: apply changes to the latest version (#3514) fix ovn ic not clean lsp and lrp when az name contains "-" (#3541) build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#3544) Revert "ovn-central: check raft inconsistency from nb/sb logs (#3532)" ovn-central: check raft inconsistency from nb/sb logs (#3532) fix chassis gc (#3525) prepare for next release Changlu Yi Qinghao Huang Zhao Congqi bobz965 changluyi dependabot[bot] hzma zhangzujian * set release v1.12.4 cni-server: set sysctl variable net.ipv4.ipnopmtu_disc to 1 by default (#3504) fix: duplicate gw nodes (#3500) add drop invalid rst 1.12 (#3490) delete String() function (#3488) fix: lost gc lsp in previous pr (#3493) fix: ipam clean all pod nic ip address and mac even if just delete a nic (#3453) fix: check chassis before creation (#3482) build(deps): bump github.com/osrg/gobgp/v3 from 3.20.0 to 3.21.0 (#3481) fix ovn eip not calculated (#3477) fix: calculate subnet before handle finalizer (#3469) schedule kube-ovn-controller on the kube-ovn-master node (#3479) delete vm's lsp and release ipam.ip (#3476) build(deps): bump github.com/onsi/ginkgo/v2 from 2.13.1 to 2.13.2 (#3475) build(deps): bump golang.org/x/time from 0.4.0 to 0.5.0 (#3463) build(deps): bump golang.org/x/sys (#3464) kube-ovn-cni: fix pinger result when timeout is reached (#3457) ovs-healthcheck: ignore error when log file does not exist (#3456) ipam: fix duplicate allocation after cidr

(#3455) fix e2e install failed readd assigned ip addresses to ipam when subnet has been changed (#3448) base: fix missing CFLAGS -fPIC for arm64 (#3428) fix: multus network status not find dpdk interface name (#3432) bump k8s to v1.27.8 (#3425) ci: fix missing environment variables (#3430) base: fix dpdk build failure (#3426) base: fix ovn build failure (#3340) fix: lsp dhcp options set failed when subnet dhcp option is enabled (#3422) trivy: ignore CVE-2023-5528 update policy route nexthops para ci: fix dpdk jobs (#3405) ci: free disk space for all x86 jobs (#3406) ci: free disk space (#3404) fix dpdk workflow (#3384) base: fix ovn-northd/ovn-controller not creating pidfile in arm64 (#3413) support ovn ic ecmp (#3348) (#3410) fix kube-ovn-monitor probe (#3409) fix: wrong usage about DeepEqual (#3396) subnet support config mtu (#3367) fix dualStack network checkgw raise panic (#3392) feat: dpdk-22.11.1 support by kube-ovn (#3388) fix: gc delete multus ip cr and lsp setting when enable keep vm ip (#3378) add kube-ovn-controller nodeAffinity prefer not on ic gateway fix: externalID map should not include external_ids (#3385) build(deps): bump github.com/moby/sys/mountinfo from 0.6.2 to 0.7.0 build(deps): bump golang.org/x/mod from 0.13.0 to 0.14.0 (#3380) build(deps): bump golang.org/x/time from 0.3.0 to 0.4.0 (#3383) build(deps): bump golang.org/x/time from 0.3.0 to 0.4.0 (#3383) prepare for next release Changlu Yi bobz965 changluyi dependabot[bot] hzma pengbinbin1 wujixin xujunjie-cover zhangzujian * * set release for 1.12.3 kube-ovn-dpdk building need its dpdk base img (#3371) delete check for existing ip cr (#3361) fix IP residue after changing subnet of vm in some scenarios (#3370) sync acp chart (#3364) kube-ovn-controller: fix memory growth caused by unused workqueue build(deps): bump github.com/osrg/gobgp/v3 from 3.19.0 to 3.20.0 (#3362) fix access svc ip failed, when acl is on (#3350) Add Layer 2 forwarding for subnet ports again (#3300) add compact for release-1.12 (#3342) prepare for next release Tobias bobz965 changluyi dependabot[bot] hzma * set release 1.12.2 Nat reuse router port external ip (#3313) dump cpu/mem profile into file on signal SIGUSR1/SIGUSR2 (#3262) kube-ovn-controller: fix ovn ic log directory not mounted to hostpath (#3322) fix golang lint error (#3323) update go version fix build error add type assertion for ip crd (#3311) add load balancer health check (#3216) build(deps): bump google.golang.org/grpc from 1.58.3 to 1.59.0 (#3310) build(deps): bump github.com/Microsoft/hcsshim from 0.11.1 to 0.11.2 (#3309) support vpc configuration of multiple external network segments through label and crd (#3264) sync subnet to vpc while switching between custom VPC and default VPC (#3218) security: ignore kubectl cve (#3305) Don't enqueue VPC update when DeletionTimestamp is zero (#3302) Revert "update base image to ubuntu:23.10 (#3289)" add base rules for allowing vrrp packets (#3293) build(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3 (#3295) build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0 (#3296) webhook: fix ip validation when pod is annotated with an ippool name (#3284) webhook: use dedicated port for health probe (#3285) add concurrency limiter to ovs-vsctl (#3288) update base image to ubuntu:23.10 (#3289) support custom vpc dns its deployment replicas (#3286) ovs: load kernel module ip_tables only when it exists (#3281) update directory name in charts readme (#3276) fix ovn build failure (#3275) build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 (#3271) build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 (#3271) build(deps): bump github.com/prometheus/client_golang (#3266) build(deps): bump github.com/prometheus/client_golang (#3266) prepare for the next release pinger: increase packet send interval (#3259) add init container in vpc-nat-gateway statefulset for init (#3254) lrp should use chassis name instead of uuid (#3258) Tobias bobz965 dependabot[bot] hzma wenwenxiong zcq98 * * set release for v1.12.1 fix: for existing nic, no need to set the port type to internal (#3243) adjust vip prints as ip (#3248) add dpdk

(#3151) build(deps): bump google.golang.org/grpc from 1.58.1 to 1.58.2 (#3251) build(deps): bump github.com/Microsoft/hcsshim from 0.11.0 to 0.11.1 (#3245) update kubectl to v1.28.2 fix goproxy Denial of Service vulnerability (#3240) build(deps): bump github.com/cyphar/filepath-securejoin (#3239) build(deps): bump github.com/onsi/ginkgo/v2 from 2.11.0 to 2.12.1 (#3237) build(deps): bump github.com/docker/docker (#3234) build(deps): bump github.com/evanphx/json-patch/v5 from 5.6.0 to 5.7.0 (#3235) build(deps): bump github.com/osrg/gobgp/v3 from 3.17.0 to 3.18.0 (#3238) build(deps): bump google.golang.org/grpc from 1.57.0 to 1.58.1 build(deps): bump github.com/Microsoft/hcsshim from 0.10.0 to 0.11.0 (#3228) build(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 (#3232) chart: remove subnet finalizers before subnets are deleted (#3213) kubectl-ko: add new command ovn-trace for tracing ovn lflows only (#3202) fix conflict after cherry-pick add golang lint (#3154) add special handling for the route policy of the default VPC (#3194) fix add static route to wrong table of ovn (#3195) netpol: fix duplicate default drop acl (#3197) add log to help find conflict ip owner (#3191) suuport user custom log location (#3186) enable set --ovn-northd-n-threads (#3150) Fix max unavailable (#3149) add probe (#3133) underlay: fix ip/route tranfer when the nic is managed by NetworkManager (#3184) ci: wait for terminating ovs-ovn pod to disappear (#3160) fix ovn build (#3166) chart: fix ovs-ovn upgrade (#3164) subnet: fix deleting lr policy on node deletion (#3176) ci/test: bump various versions (#3162) kubectl-ko: get ovn db leaders only on necessary (#3158) underlay: fix NetworkManager operation (#3147) Revert "enable set --ovn-northd-n-threads" enable set --ovn-northd-n-threads sbctl chassis operation replace with libovsdb (#3119) base: remove ovn patch for skipping ct (#3141) Enable set probe (#3145) support recreate a backup pod with full annotation (#3144) fix ovn nat not clean (#3139) ovn: do not send direct traffic between lports to conntrack (#3131) delete append externalIds process in initIPAM (#3134) add e2e test for ovn db recover (#3118) bump version number docs: updated CHANGELOG.md (#3122) bobz965 changluyi dependabot[bot] github-actions[bot] hzma * * update changelog build(deps): bump sigs.k8s.io/controller-runtime from 0.15.0 to 0.15.1 (#3120) ovn: fix corrupted database file on start (#3112) some fixes in e2e (#3116) controller: fix vpc update (#3117) increase event burst size (#3115) build(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 (#3114) ovn eip (#3107) fix u2o policy route allocate too many openflows cause oom (#3099) Fix relevant annotations are not deleted in hotnoplug nic process (#3108) ovn: delete the db file if the node with new empty db file cannot join cluster for more than 120s (#3101) get all chassis once (#3103) distinguish nat ip for central subnet with ecmp and active-standby (#3100) build(deps): bump github.com/osrg/gobgp/v3 from 3.16.0 to 3.17.0 (#3105) add log near err (#3098) iptables: reject access to invalid service port when kube-proxy works in IPVS mode (#3059) Ovn nat 1 (#3095) skip ok pod (#3090) ipam: return error for invalid ip range (#3088) some fixes in e2e (#3094) bugfix if only one port bind to the sg, then unbind the port to the sg ,it will not enforce in portgroup (#3092) fix .status.default when initializing the default vpc (#3086) fix repeate set chassis (#3083) build(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0 (#3085) fix go fmt fix kube-ovn-speaker log (#3081) remove FOSSA status card cni-server: fix ovn mappings for vpc nat gateway (#3075) fix kube-ovn-speaker (#3076) build(deps): bump github.com/Microsoft/hcsshim from 0.9.10 to 0.10.0 (#3079) ovn client: fix sb chassis existence check (#3072) e2e: fix switch lb rule test (#3071) bump github.com/docker/docker to v24.0.5 (#3073) iptables: add --random-fully to SNAT rules (#3066) update lint tmeout build(deps): bump github.com/onsi/gomega from 1.27.9 to 1.27.10 (#3069) bump k8s to v1.27.4 (#3063) e2e: do not import pkg/daemon (#3055) build(deps): bump github.com/onsi/gomega from 1.27.8 to

(#3065) build(deps): bump github.com/Microsoft/hcsshim from 0.9.9 to 0.9.10 (#3061) ci: fix multus installation (#3062) add srl connectivity test (#3056) ipam: fix ippool with single dual-stack address (#3054) controller: skip VIP gc if LB not found (#3048) keep vm vip when enableKeepVmIP is true (#3053) cni: reduce memory usage (#3047) set genevsys6081 tx checksum off (#3045) fix vpc lb init (#3046) custom vpc pod support tcp http probe with tproxy method (#3024) change log (#3042) Makefile: add deepflow and kwok installation (#3036) windows: fix ovn patches (#3035) ci: pin go version to 1.20.5 (#3034) static ip in exclude-ips can be allocated normally when subnet's availableIPs is 0 (#3031) pinger: use fully qualified domain name (#3032) feat: suport kubevirt nic hotplug (#3013) fix lrp eip not clean (#3026) build(deps): bump helm/kind-action from 1.7.0 to 1.8.0 (#3029) update maintainer uninstall.sh: fix ipset name (#3028) build(deps): bump github.com/docker/docker (#3027) replace ovn legacy client with libovsdb (#3018) install.sh: fix duplicate resources apply (#3023) build(deps): bump github.com/docker/docker (#3019) build(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.2 (#3020) ovn: fix cluster connections when SSL is enabled (#3001) cleanup.sh: wait for provier-networks to be deleted before deleting kube-ovn-cni (#3006) kube-ovn-controller: fix workqueue metrics (#3011) ci: fix go cache key (#3015) fix vlan subnet use logical gw can not access outside cluster node (#3007) build(deps): bump github.com/prometheus-community/pro-bing (#3016) fix vpc already delete while delete policy route (#3005) make compatible with simplicified enable-eip-snat-cm (#3009) build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 (#3012) subnet: fix nat outgoing policy rule (#3003) build(deps): bump github.com/osrg/gobgp/v3 from 3.15.0 to 3.16.0 (#3010) fix subnet finalizer (#3004) chart: fix readOnly in volumes (#3002) libovsdb: various bug fixes (#2998) choose subnet by pod's annotation in networkpolicy (#2987) IPPool: fix missing support for CIDR (#2982) kubectl ko performance enhance (#2975) fix deleting old sb chassis for a re-added node (#2989) add e2e for new ippool feature (#2981) underlay: fix NetworkManager syncer for virtual interfaces (#2988) underlay: does not set a device managed to no if it has VLAN managed by NM (#2986) build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 (#2985) support helm install hybrid_dpdk ovs-ovn (#2980) add unittest for IPAM (#2977) IPAM: fix subnet mutex not released when static IP is out of range (#2979) fix initialization check of vpc nat gateway configuration (#2978) refactor: make qos test cases parallel (#2957) IPAM: add support for ippool (#2958) build(deps): bump google.golang.org/grpc from 1.56.0 to 1.56.1 (#2974) ovn ic support dual (#2970) base: fix ovn patches (#2971) build(deps): bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0 (#2968) add detail comment (#2969) add host multicast perf (#2965) cni-server: reconcile ovn0 routes periodically (#2963) uninstall.sh: flush and delete iptables chain OVN-MASQUERADE (#2961) fix e2e failed (#2960) u2o specify u2oip from v1.9 (#2934) underlay: sync NetworkManager IP config to OVS bridge (#2949) chore: USERS.md (#2955) bump k8s version to v1.27.3 (#2953) ci: fix build-base strategy (#2950) e2e: add qos policy test cases (#2924) typo (#2952) build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.0 (#2951) build(deps): bump github.com/prometheus/client_golang (#2948) Revert "nm not managed only in the change provide nic name case (#2754)" (#2944) add permision for test-server.sh (#2942) Kubectl ko diagnose perf (#2915) build(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0 (#2940) controller: fix DHCP MTU when the default network mode is underlay (#2941) e2e: fix u2o case (#2931) add err log to help find conflict ip owner (#2939) support set the mtu of dhcpv4_options (#2930) modify lb-svc dnat port error (#2927) fix race condition in gateway check logs (#2928) add subnet.spec.u2oInterconnectionIP (#2921) disable ai review e2e: fix waiting deployment to be

(#2909) make conformance with underlay pn vlan subnet has no gw (#2908) fix: natgw init check command not work (#2923) fix issue 2916 (#2917) add sync map to fix cocurrent write (#2918) cni-server: clear iptables mark before doing masquerade (#2919) build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0 (#2913) build(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8 (#2914) For eip created without spec.V4ip this field (#2912) match outgoing interface when perform snat (#2911) libovsdb: ignore not found error when listing objects with a filter (#2900) build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 (#2903) build(deps): bump github.com/osrg/gobgp/v3 from 3.14.0 to 3.15.0 (#2904) fix base build fix build base ci fix build base ci refactor IPAM (#2896) add e2e u2o vpc version check (#2901) kube-ovn-controller: fix subnet update (#2882) Supporting user-defined kubelet directory (#2893) ci: use latest golangci-lint underlay: do not delete patch ports created by ovn-controller (#2851) update pr-review auto build base for release branches Add natoutgoing policy rules (#2883) pin golangci-lint version skip case 'connect to NodePort service with external traffic policy set to Local from other nodes' (#2895) refactor subnet gateway (#2872) update webhook check (#2878) skip pr-review as run out openai quota skip kubectl cve build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7 (#2890) e2e: multiple external network (#2884) build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#2885) fix vip str format (#2879) ci: fix valgrind result analysis (#2853) ovs: fix memory leak in qos (#2871) feat: vpc nat gw e2e (#2866) build(deps): bump github.com/docker/docker (#2875) fix gc nil pointer (#2858) bump k8s to v1.27.2 (#2861) add e2e test for slr (#2841) Move docs to new website (#2862) build(deps): bump gopkg.in/k8snetworkplumbingwg/multus-cni.v4 (#2860) update dependabot refactor clusterrole for kube-ovn (#2833) some fixes in CI/e2e (#2856) manage ovn bfd with libovsdb (#2812) update the volumeMounts premission (#2852) fix vip lsp not clean (#2848) U2o support custom vpc (#2831) kubectl-ko: fix trace when u2oInterconnection is enabled (#2836) ci: detect ovs/ovn memory leak (#2839) iptables: always do SNAT for access from other nodes to nodeport with external traffic policy set to Local (#2844) fix underlay access to node through ovn0 (#2842) build(deps): bump github.com/docker/docker (#2843) adapt vpc dns in master (#2822) bump go dependencies (#2820) fix MTU when subnet is using logical gateway (#2834) refactor image builds (#2818) build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#2832) build(deps): bump github.com/onsi/gomega from 1.27.6 to 1.27.7 (#2830) vip support create arp proxy logical switch port (#2817) build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 (#2828) build(deps): bump github.com/docker/docker (#2827) add route for service ip range when init vpc-nat-gw (#2821) do not allocate MAC address when kube-ovn is called as an IPAM plugin (#2816) Iptables nat support share eip (#2805) fix typos (#2815) fix some typos (#2814) add iperf to test group multicast (#2796) add available check for northd enpoint (#2799) manage ovn lr static route with libovsdb (#2804) add support of user-defined endpoints to SwitchLBRule (#2777) e2e: fix test container not removed (#2800) manage ovn lr policy with libovsdb (#2788) build(deps): bump github.com/docker/distribution (#2797) fix handedeletePod repeat 4 times (#2789) fix cleanup order (#2792) fix missing main route table for the default vpc (#2785) add ovn DVR fip e2e (#2780) build(deps): bump github.com/containernetworking/plugins (#2784) add key lock for more resources (#2781) bump cni plugins to v1.3.0 (#2786) replace util.DefaultVpc with c.config.ClusterRouter (#2782) fix static route recreation after kube-ovn-controller restarts (#2778) clean up code about static routes (#2779) Reorder cleanup step by put subnet and vpc to the last to avoid conflict (#2776) optimize kube-ovn-controller logic (#2771) use rate limiting queue with delaying for pod deletion

(#2774) fix underlay subnet kubectl ko trace error (#2773) feat: natgw qos (#2753) build(deps): bump github.com/docker/docker (#2770) fix ip statistics in subnet status (#2769) informer: wait for cache sync before adding event handlers (#2768) build(deps): bump github.com/scylladb/go-set (#2766) support disable arp check ip conflict in vlan provider network (#2760) replace string map with string set (#2765) cni-server: wait ovs-vswitchd to be running (#2759) kubectl-ko: support trace for pod with host network (#2761) libovsdb: fix potential duplicate addresses (#2763) ci: run kube-ovn e2e for underlay (#2762) kubectl-ko: fix pod tracing in underlay (#2757) When Subnet spec.vpc is updated, the status in VPC should also be updated. (#2756) ovn-nbctl: remove unused functions (#2755) add route table option in static route for subnet (#2748) replace acl/address_set function call with ovnClient (#2648) nm not managed only in the change provide nic name case (#2754) support node local dns cache (#2733) build(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0 (#2752) build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0 (#2751) update eip qos procees, replace qosLabelEIP with natLabelEip (#2736) refresh nat gw image before using it (#2743) build(deps): bump github.com/prometheus/client_golang (#2745) Using full repo name to avoid short-name error in podman (#2746) build(deps): bump github.com/osrg/gobgp/v3 from 3.13.0 to 3.14.0 (#2738) add policy route when use old active gateway node for centralized subnet (#2722) feat: support for multiple external network (#2725) build(deps): bump github.com/docker/docker (#2732) build(deps): bump github.com/Microsoft/hcsshim from 0.9.8 to 0.9.9 (#2731) base: remove patch for fixing ofpbuf memory leak (#2715) fix recover db failed using method in (#2711) refactor: improve performance by using cache (#2713) For dualstack and ipv6 the default ipv6 range should be same with the ipv4 cidr. (#2708) feat: support dynamically changing qos for EIP (#2671) base: refactor dockerfile (#2696) kubectl-ko: add support for tracing nodes (#2697) cni-server: do not perform ipv4 conflict detection during VM live migration (#2693) fix: iptables nat gw e2e not clean sts eth0 net1 ip (#2698) Add random fully when nat (#2681) replace StrategicMergePatchType with MergePatchType (#2694) ci: fix scheduled vpc nat gateway e2e (#2692) ovn-controller: do not send GARP on localnet for Kube-OVN ports (#2690) netpol: fix enqueueing network policy after LSP creation (#2687) add tcp mem collector (#2683) fix manifest yamls (#2689) attach node name label in ip cr (#2680) adapt ippool annotation (#2678) netpol: fix packet drop casued by incorrect address set deletion (#2677) fix kubectl ko using ovn-central pod that not in a good status (#2676) add nat gw e2e (#2639) add workflows for release chart (#2672) build(deps): bump github.com/Microsoft/go-winio from 0.6.0 to 0.6.1 (#2663) remove auto update k8s and cadvisor build(deps): bump k8s.io/sample-controller from 0.26.3 to 0.26.4 (#2675) ignore k8s major and minor dependencies as they always break build. rename charts (#2667) ipam update condition refactor (#2651) fix LSP existence check (#2657) fix network policy issues (#2652) Resolve SetLoadBalancerAffinityTimeout not being effective (#2647) broadcast free arp when pod is setup (#2638) delete sync user (#2629) fix: eip qos (#2632) fix: make webhook port configurable. (#2631) support ovn ipsec (#2616) feat: add support for EIP QoS (#2550) libovsdb: fix race condition in OVN LB operations (#2625) fix IPAM allocation caused by incorrect pod annotations patch (#2624) ci: deploy multus in thick mode (#2628) libovsdb: use monitor_cond as the monitor method (#2627) ci: fix multus installation (#2622) ovs: fix dpif-netlink ofpbuf memory leak (#2620) Optimized tolerations code in vpc-nat-gw (#2613) replace port_group function call with ovnClient (#2608) reduce test binary size and add missing webhook build (#2610) fix: ovneip print column and finalizer (#2593) add affinity to vpc-nat-gw (#2609) ci: fix multus installation (#2604) update

(#2600) bump go modules (#2603) build(deps): bump peter-evans/create-pull-request from 4 to 5 (#2606) build(deps): bump github.com/docker/docker (#2605) build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 (#2607) cut invalid OVNNBDAEMON to make log more readable (#2601) unittest: fix length assertion (#2597) use copilot to generate pr content replace lb function call with ovnClient (#2598) build(deps): bump github.com/osrg/gobgp/v3 from 3.12.0 to 3.13.0 (#2596) Merge handleAddPod with handleUpdatePod. (#2563) fix log (#2586) fix: ovn snat and fip delete (#2584) underlay: get address/route before setting nm managed to no (#2592) update chart description (#2582) iptables: use the same mode with kube-proxy (#2535) ci: bump kind image to v1.26.3 (#2581) fix: invalid memory address (#2585) kubectl ko change solution to collect logs to path kubectl-ko-log (#2575) if one item is removed, do not requeue (#2578) build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6 (#2579) fix vpc dns when ovn-default is dualstack (#2576) move the vpc-nat generic configurations into one single ConfigMap (#2574) feat: add ovn dnat (#2565) Fix kubectl ko log loss when restart deployment or ds (#2531) add wait until (#2569) do no review dependency update build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 (#2572) move ipam.subnet.mutex to caller (#2571) build(deps): bump sigs.k8s.io/controller-runtime from 0.14.5 to 0.14.6 (#2568) fix: memory leak in IPAM caused by leftover map keys (#2566) build(deps): bump github.com/docker/docker (#2567) fix ovn-bridge-mappings deletion (#2564) fix lrp deletion after upgrade (#2548) fix gw label for vpc update field (#2562) update CRD in helm chart (#2560) fix CRD indent in install.sh (#2559) fix update snat rules not effect correctly (#2554) fix go mod list (#2556) do not set device unmanaged if NetworkManager is not running (#2549) update review bot build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5 (#2551) underlay: fix network manager operation (#2546) controller: fix apiserver connection timeout on startup (#2545) fix update fip rules not effect correctly (#2540) fix lsp deletion failure when external-ids:ls is empty (#2544) sync parameters to charts from install script (#2526) underlay: delete altname after renaming the link (#2539) failed to delete ovn-fip or ovn-snat (#2534) fix encap_ip will be lost when we restart the ovs-dpdk node (#2543) fix service fail (#2537) Add speaker param check (#2538) feat: support nic-hotplug to a running pod. (#2521) build(deps): bump google.golang.org/grpc from 1.53.0 to 1.54.0 (#2541) fix update dnat rules not effect correctly (#2518) underlay: fix link name exchange (#2516) add vip to webhook e2e (#2525) fix submariner e2e (#2519) fix lsp gc after upgrade (#2513) fix: ovn-fip creation failure due to an excessively long label (#2529) add sleep (#2523) when restart deployment kube-ovn-controller the kubectl ko log loss (#2508) optimize e2e framework (#2492) fix ovs patches (#2506) fix subnet iprange not correct (#2505) bump k8s to v1.26.3 (#2514) add kubevirt multus nic lsp before gc process (#2504) update slack link docs: updated CHANGELOG.md (#2515) optimize ovs upgrade script (#2512) ci: change to pullrequesttarget ci: add openai to review the code (#2511) add support of user-defined image name for vpc-dns (#2502) build(deps): bump google.golang.org/protobuf from 1.29.1 to 1.30.0 (#2500) build(deps): bump github.com/Microsoft/hcsshim from 0.9.7 to 0.9.8 (#2499) replace lr/ls/lrp/lsp function call with ovnClient (#2477) ci: fix go cache (#2498) add skip (#2491) ensure address label is correct before deleting it (#2487) fix scheduled submariner e2e (#2469) build(deps): bump actions/setup-go from 3 to 4 (#2490) build(deps): bump github.com/onsi/gomega from 1.27.3 to 1.27.4 (#2489) add some sleep wait iptables clean (#2488) Add kubectl ko log (#2451) fix: gw configmap may not exist (#2484) fix ovs qos e2e for versions prior to v1.12 (#2483) add node to addNodeQueue if required annations are

(#2481) Add jitter support to netem qos parameters (#2476) build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.29.1 (#2480) fix ovs-ovn startup/restart (#2467) fix changging the stopped vm's subnets, the vm cann't start normally (#2463) build(deps): bump github.com/onsi/gomega from 1.27.2 to 1.27.3 (#2475) when we delete the podit's no need to update the sgs assign to pod (#2465) fix libovsdb issues (#2462) fix ips CR not found due to etcd error (#2472) wait for subnet lb (#2471) chore: update base periodically to resolve security issues. (#2470) do not delete external switch if it is created by provider network vlan subnet (#2449) add upgrade compatibility (#2468) ci: fix ovn-ic installation (#2456) FixedPrevents grep from prematurely exiting the shell script if it cannot find a pattern (#2466) add install for webhook (#2460) e2e add some debug info and sleep (#2439) do not set subnet's vlan empty on failure (#2445) wait subnet lb clear in set subnet EnableLb to false e2e (#2450) build(deps): bump github.com/emicklei/go-restful/v3 (#2458) ci(Mergify): configuration update (#2457) kube-ovn-speaker support IPv6/Dual (#2455) replace nb_global function call with ovnClient (#2454) build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0 (#2452) fix parsing logical router static routes (#2443) base: fix ovn patches (#2444) prepare for libovsdb replacement (#1978) support auto change external bridge (#2437) fix ovn-speaker router bug (#2433) ovs: change update strategy to RollingUpdate (#2422) add kubevirt install (#2430) e2e: wait for subnet to meet specified condition (#2431) delete all invalid ovn lb strategy and prevent invalid multiple endpoint reconsile (#2419) add sumbarier case (#2416) iptables-rules upgrade compatible (#2429) add log (#2423) check subnet gateway after wait (#2428) fix chart install/upgrade e2e (#2426) ci: fix cilium chaining e2e (#2391) build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0 (#2427) resolve e2e error in v1.12.0 (#2425) update test server and test results (#2421) Modify the pod scheduling of vpcdns (#2420) e2e: double parallel test nodes in ci (#2411) fix scheduled e2e (#2417) build(deps): bump sigs.k8s.io/controller-runtime from 0.14.4 to 0.14.5 (#2415) build(deps): bump github.com/osrg/gobgp/v3 from 3.11.0 to 3.12.0 (#2414) build(deps): bump k8s.io/klog/v2 from 2.90.0 to 2.90.1 (#2413) bump go modules (#2408) e2e: fix random conflict in parallel processes (#2410) fixbasesg_rule (#2401) build(deps): bump k8s.io/sample-controller from 0.26.1 to 0.26.2 (#2403) build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2 (#2396) Support bfd management (#2382) remove unused param (#2393) update ipv6 security-group remote group name (#2389) Fix routeregexp ipv6 (#2395) ci: fix ref name check (#2390) add support of user-defined kubelet directory (#2388) support 1.11 (#2387) ci: skip netpol e2e automatically for push events (#2379) ci: make path filter more accurate (#2381) build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#2386) Fix comment format (#2383) fix: ovs-ovn should reboot now (#2297) fix service dual stack add/del cluster ips not change ovn nb (#2367) ci: fix path filter for windows build (#2378) e2e: run specs in parallel (#2375) add base sg rules for ports (#2365) accelerate cleanup (#2376) update ovnnb model (#2371) docs: updated CHANGELOG.md (#2373) fix changelog workflow (#2372) build(deps): bump github.com/Microsoft/hcsshim from 0.9.6 to 0.9.7 (#2370) Add gateway monitor metrics and event (#2345) ci: fix default branch test (#2369) fix github actions workflows (#2363) Fixed iptables creation failure due to an excessively long label (#2366) use existing node switch cidr instead of the configured one (#2359) Do not wait pod deletion one by one to accelerate install (#2360) Change log level (#2362) change log level (#2356) build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1 (#2357) simplify github actions workflows (#2338) update go version to v1.20 (#2312) build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0 (#2353) build(deps): bump github.com/onsi/gomega from 1.26.0 to

(#2349) chore: no need to wait 30 seconds before kube-ovn-cni get ready. (#2339) do not remove link local route on ovn0 (#2341) fix encap ip when the tunnel interface has multiple addresses (#2340) fix legacy network policy err (#2313) enqueue endpoint when handling service add event (#2337) Add neighbor-address format check for kube-ovn-speaker (#2335) add ovnext0 inside ns on gw node for ecmp static route with bfd (#2237) OVN LB: add support for SCTP protocol (#2331) fix getting service backends in dual-stack clusters (#2323) e2e: skip case of switching session affinity (#2328) fix k8s networking dns e2e (#2325) Add the bgp router-id format check (#2316) perform the gateway check but ignore the result when the annotation of subnet is disableGatewayCheck=true to make sure of the first network packet (#2290) perf: use empty struct to reduce memory usage (#2327) split netpol cases (#2322) feat: support default service session stickiness timeout (#2311) feat: configure routes via pod annotation (#2307) build(deps): bump github.com/docker/docker (#2320) e2e: do not test versions prior to 1.11 for ovn-ic update (#2319) ovndb: use Local_Config to configure listen addresses (#2299) chore: improve the list style in Markdown (#2315) fix egress node and gateway acl should apply after lb. (#2310) fix kube-ovn-controller crash on startup (#2305) build(deps): bump google.golang.org/grpc from 1.52.3 to 1.53.0 (#2308) build(deps): bump golang.org/x/sys from 0.4.0 to 0.5.0 (#2309) ignore e2e for subnet enableEcmp before v1.12.0 (#2306) fix u2o code err (#2300) set join subnet.spec.enableLb to nil (#2304) fix image tag in helm chart (#2302) update trivy deprecated arg and the ignored CVE. (#2296) move enableEcmp to subnet (#2284) build(deps): bump sigs.k8s.io/controller-runtime from 0.14.3 to 0.14.4 (#2301) fix gosec ci installation (#2295) delete htb qos priority (#2288) build(deps): bump sigs.k8s.io/controller-runtime from 0.14.2 to 0.14.3 (#2292) ovn northd: fix connection inactivity probe (#2286) fix ct new config error (#2289) fix wrong network interface name in gateway check (#2282) build(deps): bump github.com/docker/docker (#2287) Improve webhook (#2278) add named port support (#2273) fix access from node to overlay pods when network policy ingress exists (#2279) move enableLb to subnet (#2276) build(deps): bump github.com/osrg/gobgp/v3 from 3.10.0 to 3.11.0 (#2280) add V4/V6UsingIPRange and V4/V6AvailableIPRange in subnet status (#2268) skip u2o test case before 1.9 (#2274) fix network break on kube-ovn-cni startup (#2272) bump go modules (#2267) fix setting mtu for ovs internal port (#2247) bump ovs/ovn versions (#2254) use node ip instead of ovn0 ip when accessing overlay pod/svc from host network (#2243) build(deps): bump google.golang.org/grpc from 1.52.1 to 1.52.3 (#2265) build(deps): bump google.golang.org/grpc from 1.52.0 to 1.52.1 (#2264) build(deps): bump k8s.io/klog/v2 from 2.80.1 to 2.90.0 (#2262) build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0 (#2263) build(deps): bump k8s.io/sample-controller from 0.26.0 to 0.26.1 (#2260) build(deps): bump github.com/docker/docker (#2259) egress networkpolicy acl add option apply-after-lb (#2251) ovn db: add support for listening on pod ip (#2235) update cni plugin to 1.2.0 (#2255) build(deps): bump github.com/onsi/gomega from 1.24.2 to 1.25.0 (#2257) clean up legacy u2o implement (#2248) eip status (#2256) build(deps): bump github.com/containernetworking/plugins (#2253) fix vip create (#2245) improve webhook functions for vpc and subnet (#2241) fix syntax errors (#2240) add release-1.11 to scheduled e2e (#2238) fix webhook (#2236) fix: ovnic del old AZ after establish the new as name (#2229) prepare for next release build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 (#2234) Alex Jones Daviddcc KillMaster9 Longchuanzheng Miika Petjniemi Nico Wang Rick bobz965 changluyi dependabot[bot] fsl github-actions[bot] gugu hzma jeffy jizhixiang lanyujie liuzhen21 lut777 mingo qiutingjun shane wangyd1988 wujixin xujunjie-cover * * set release 1.11.16 fix cves ci: fix memory leak reporting caused by ovn-controller

(#3873) Fix the failure to enable multi-network card traffic mirroring for newly created pods (#3805) fix incorrect variable assignment (#3787) if startOVNIC firstly, and setazName secondly, the ovn-ic-db may sync the old azname (#3762) ci: cleanup disk space Log near err (#3739) ip trigger subnet delete (#3703) fix some ip can not allocate after released (#3699) Compatible with controller deployment methods before kube-ovn 1.11.16 ovn: do not send direct traffic between lports to conntrack (#3663) sync master change to 1.11 (#3674) delete cm ovn-ic-config cause crash 1.11 (#3665) prepare for next release Changlu Yi bobz965 changluyi xieyanker zhangzujian * set for release 1.11.15 refactor start-ic-db.sh (#3645) kube-ovn-monitor and kube-ovn-pinger export pprof path (#3656) SYSCTLIPV4IPNOPMTU_DISC set default to 0 Ovn ic ecmp enhance 1.11 (#3609) fix: subnet can not delete even if no ip in using (#3621) fix: static spectify one ip (#3614) do not calculate subnet.spec.excludeIPs as availableIPs (#3612) update policy route when subnet cidr changed (#3611) prepare for next release Changlu Yi bobz965 changluyi hzma set release 1.11.14 ovs: increase cpu limit to 2 cores (#3530) fix u2o infinity recycle (#3567) 1.11 ip delete lsp (#3562) fix ipam deletion (#3549) Revert "ovn-central: check raft inconsistency from nb/sb logs (#3532)" fix IP residue after changing subnet of vm in some scenarios (#3370) ovn-central: check raft inconsistency from nb/sb logs (#3532) prepare for next release bobz965 changluyi zhangzujian * set release v1.11.13 cni-server: set sysctl variable net.ipv4.ipnopmtu_disc to 1 by default (#3504) typo (#3495) add iptables drop invalid rst (#3491) delete vm's lsp and release ipam.ip (#3476) fix: ipam clean all pod nic ip address and mac even if just delete a nic (#3451) ovs-healthcheck: ignore error when log file does not exist (#3456) prepare for the next release bobz965 changluyi zhangzujian * set allow-related for gatewayACL and NodePgACL (#3433) bump k8s to v1.26.11 (#3427) base: fix ovn build failure (#3340) optimize ecmp policy route (#3421) trivy: ignore CVE-2023-5528 mtu merge failed (#3417) fix helm (#3412) Supporting user-defined kubelet directory (#2893) add mtu config to release-1.11 fix Vulnerability (#3391) add kube-ovn-controller nodeAffinity prefer not on ic gateway Revert "upgrade ovs-ovn pod by generation version instead of chart version (#1960)" (#3387) delete check for existing ip cr (#3361) kube-ovn-controller: fix memory growth caused by unused workqueue add compact switch release-1.11 (#3338) add switch for compact (#3336) base: fix ovn build failure (#3327) kube-ovn-controller: fix ovn ic log directory not mounted to hostpath (#3322) fix golang lint error (#3323) add type assertion for ip crd (#3311) update go net version to v0.17.0 (#3312) security: ignore kubectl cve (#3305) Revert "update base image to ubuntu:23.10 (#3289)" update base image to ubuntu:23.10 (#3289) ovs: load kernel module ip_tables only when it exists (#3281) pinger: increase packet send interval (#3259) Changlu Yi bobz965 changluyi hzma zhangzujian * * set for release 1.11.11 fix: for existing nic, no need to set the port type to internal (#3243) undo delete perl cmd to update release-1.11 image update kubectl and delete perl (#3223) fix vpc-peer dualstack bug (#3204) fix ipam random get (#3200) fix G101 add err log to help find conflict ip owner (#2939) underlay: fix ip/route tranfer when the nic is managed by NetworkManager (#3184) fix ovn build (#3166) chart: fix ovs-ovn upgrade (#3164) subnet: fix deleting lr policy on node deletion (#3178) delete append externalIds process in initIPAM (#3134) move unnecessary init process after startWorkers (#3124) underlay: fix NetworkManager operation (#3147) base: remove ovn patch for skipping ct (#3140) delete append externalIds process in initIPAM (#3134) prepare for the next release add e2e test for ovn db recover (#3118) update

bobz965 hzma * * ovn: fix corrupted database file on start (#3112) update version to v1.11.10 fix u2o policy route generate too many flow tables cause oom distinguish nat ip for central subnet with ecmp and active-standby (#3100) bugfix if only one port bind to the sg, then unbind the port to the sg ,it will not enforce in portgroup (#3092) Revert "fix sg" fix sg fix .status.default when initializing the default vpc (#3086) cni-server: fix ovn mappings for vpc nat gateway (#3075) ovn client: fix sb chassis existence check (#3072) ci: do not pin go version (#3073) ci: fix multus installation (#3062) ipam: fix ippool with single dual-stack address (#3054) fix vpc lb init (#3046) Revert "prepare for next release" set genevsys6081 tx checksum off (#3045) prepare for next release fix ifname start with pod (#3038) static ip in exclude-ips can be allocated normally when subnet's availableIPs is 0 #3031 ci: pin go version to 1.20.5 (#3034) pinger: use fully qualified domain name (#3032) uninstall.sh: fix ipset name (#3028) kube-ovn-controller: fix workqueue metrics (#3011) fix subnet finalizer (#3004) choose subnet by pod's annotation in networkpolicy (#2987) kubectl ko performance enhance (#2975) (#2994) fix deleting old sb chassis for a re-added node (#2989) underlay: fix NetworkManager syncer for virtual interfaces (#2988) underlay: does not set a device managed to no if it has VLAN managed by NM (#2986) bump k8s version to v1.26.6 (#2973) base: fix ovn patches (#2972) add detail comment Kubectl ko diagnose perf release 1.11 (#2967) cni-server: reconcile ovn0 routes periodically (#2963) uninstall.sh: flush and delete iptables chain OVN-MASQUERADE (#2961) underlay: sync NetworkManager IP config to OVS bridge (#2949) typo (#2952) Revert "base: fix ovn build failure (#2926)" Revert "nm not managed only in the change provide nic name case (#2754)" (#2944) kubectl ko perf on release-1.11 (#2945) controller: fix DHCP MTU when the default network mode is underlay (#2941) support set the mtu of dhcpv4_options (#2930) u2o support specify u2o ip on release-1.11 (#2937) modify lb-svc dnat port error (#2927) bobz965 changluyi hzma yichanglu * * prepare for next release base: fix ovn build failure (#2926) bump version number to v1.11.8 fix encap_ip will be lost when we restart the ovs-dpdk node (#2543) cni-server: clear iptables mark before doing masquerade (#2919) For eip created without spec.V4ip this field (#2912) match outgoing interface when perform snat (#2911) * prepare for release 1.11.7 underlay: do not delete patch ports created by ovn-controller (#2851) fix gc report error #2886 add support of user-defined kubelet directory (#2388) ci: fix valgrind result analysis (#2853) ovs: fix memory leak in qos (#2871) prepare for next release zhangzujian * * prepare for next release u2o support custom vpc release 1.11 (#2849) kubectl-ko: fix trace when u2oInterconnection is enabled (#2836) ci: detect ovs/ovn memory leak (#2839) fix underlay access to node through ovn0 (#2846) iptables: always do SNAT for access from other nodes to nodeport with external traffic policy set to Local (#2844) delete user tss (#2838) ci: fix no-avx512 image build ci: fix kube-ovn-base build refactor image builds (#2818) fix MTU when subnet is using logical gateway (#2834) update vpc dns env value add route for service ip range when init vpc-nat-gw (#2821) fix cleanup order (#2792) add available check for northd enpoint update release note changluyi hzma zhangzujian * prepare for release 1.11.5 reorder the deletion to avoid dependency conflict fix ip statistics in subnet status (#2769) support disable arp check ip conflict in vlan provider network (#2760) cni-server: wait ovs-vswitchd to be

(#2759) ci: run kube-ovn e2e for underlay (#2762) iptables: use the same mode with kube-proxy (#2758) nm not managed only in the change provide nic name case (#2754) update policy route when change from ecmp to active-standby (#2717) fix recover db failed using offical doc (#2718) fixbasesg_rule (#2401) add base sg rules for ports (#2365) bump base images base: remove patch for fixing ofpbuf memory leak (#2715) prepare for release 1.11.4 cni-server: do not perform ipv4 conflict detection during VM live migration (#2693) fix can not clean the last abandoned snat table (#2701) replace StrategicMergePatchType with MergePatchType (#2694) fix build error by partially revert 951f89c5 ovn-controller: do not send GARP on localnet for Kube-OVN ports (#2690) adapt ippool annotation (#2678) netpol: fix packet drop casued by incorrect address set deletion (#2677) fix pg set port fail when lsp is already deleted (#2658) add subnetstatus lock for handleAddOrUpdateSubnet (#2669) broadcase free arp when pod setup delete sync user (#2629) Add ipsec package to image release 1.11 (#2618) ci: deploy multus in thick mode (#2628) libovsdb: use monitor_cond as the monitor method (#2627) ci: fix multus installation (#2622) ovs: fix dpif-netlink ofpbuf memory leak (#2620) update Dockerfile.debug ci: fix multus installation (#2604) cut invalid OVNNBDAEMON to make log more readable (#2601) unittest: fix length assertion (#2597) bump base image security: remove CVE-2022-29526 from .trivyignore base: fix CVE-2022-3294 (#2594) underlay: get address/route before setting nm managed to no (#2592) base: fix ovs patches (#2590) ci: bump kind image to v1.26.3 (#2581) move ipam.subnet.mutex to caller (#2571) fix: memory leak in IPAM caused by leftover map keys (#2566) fix ovn-bridge-mappings deletion (#2564) fix go mod list (#2556) do not set device unmanaged if NetworkManager is not running (#2549) fix update dnat rules not effect correctly (#2518) underlay: fix network manager operation (#2546) controller: fix apiserver connection timeout on startup (#2545) underlay: delete altname after renaming the link (#2539) underlay: fix link name exchange (#2516) fix changging the stopped vm's subnets, the vm cann't start normally (#2463) add kubevirt multus nic lsp before gc process (#2504) update for release v1.11.3 bobz965 changluyi hzma yichanglu zhangzujian * * prepare for release v1.11.3 ensure address label is correct before deleting it (#2487) add node to addNodeQueue if required annations are missing (#2481) fix ips CR not found due to etcd error (#2472) ci: fix ovn-ic installation (#2456) do not set subnet's vlan empty on failure (#2445) change cni version from v1.1.1 to v1.2.0 fix ovn-speaker router bug (#2433) fix chart install/upgrade e2e (#2426) ci: fix cilium chaining e2e (#2391) Modify the pod scheduling of vpcdns (#2420) fix: python package issues update ipv6 security-group remote group name (#2389) Fix routeregexp ipv6 (#2395) ci: fix ref name check (#2390) bump base images ci: skip netpol e2e automatically for push events (#2379) ci: make path filter more accurate (#2381) fix service dual stack add/del cluster ips not change ovn nb ci: fix path filter for windows build (#2378) e2e: run specs in parallel (#2375) Daviddcc KillMaster9 changluyi hzma jeffy yichanglu zhangzujian * fix CVE-2022-41723 bump base images fix: ovs-ovn should reboot now (#2298) ci: fix default branch test (#2369) fix github actions workflows (#2363) simplify github actions workflows (#2338) Fixed iptables creation failure due to an excessively long label (#2366) Improve webhook (#2278) eip status (#2256) fix vip create (#2245) improve webhook functions for vpc and subnet (#2241) fix webhook (#2236) use existing node switch cidr instead of the configured one (#2359) Release 1.11 merge netpol (#2361) Release 1.11 merge netpol (#2355) prepare for

do not remove link local route on ovn0 (#2341) fix encap ip when the tunnel interface has multiple addresses (#2340) enqueue endpoint when handling service add event (#2337) Add neighbor-address format check for kube-ovn-speaker (#2335) OVN LB: add support for SCTP protocol (#2331) fix getting service backends in dual-stack clusters (#2323) fix github actions workflow perform the gateway check but ignore the result when the annotation of subnet is disableGatewayCheck=true to make sure of the first network packet (#2290) Add the bgp router-id format check (#2316) KillMaster9 changluyi jeffy lut777 qiutingjun zhangzujian * prepare for release v1.11.1 fix: ovnic del old AZ after establish the new as name (#2229) fix u2o code err fix kube-ovn-controller crash on startup (#2305) fix Makefile delete htb qos priority (#2288) fix gosec ci installation (#2295) ovn northd: fix connection inactivity probe (#2286) fix ct new config error fix network break on kube-ovn-cni startup (#2272) fix setting mtu for ovs internal port (#2247) fix gosec installation fix ovn patches ovn db: add support for listening on pod ip (#2235) Revert "prepare for next release" prepare for next release changluyi lut777 zhangzujian * Update CHANGELOG.md for v1.11.0 feat: add helm upgrade e2e (#2222) fix: now route with connected/static will all be sync (#2231) add enable-metrics arg to disable metrics (#2232) add u2o test case (#2203) add more args to break test server add release-1.8/1.9/1.10 to scheduled e2e (#2224) cni-server: fix waiting for routed annotation (#2225) build(deps): bump golang.org/x/sys from 0.3.0 to 0.4.0 (#2223) feature: detect ipv4 address conflict in underlay (#2208) fix git ref name in e2e (#2218) fix e2e for v1.8 (#2216) some fixes for e2e testing (#2207) build(deps): bump github.com/osrg/gobgp/v3 from 3.9.0 to 3.10.0 (#2209) distinguish ippool process for dualstack and normal ippool situation (#2204) u2o feature (#2189) ovn nb and sb can't bind lan ip in ssl (#2200) build(deps): bump sigs.k8s.io/controller-runtime from 0.14.0 to 0.14.1 (#2199) local ip bind to service (#2195) refactor e2e testing (#2078) fix: ovs gc just for pod if (#2187) update docs link in install.sh (#2196) fix lr policy for default subnet with logical gateway enabled (#2177) sync delete pod process from release-1.9 (#2190) fix: update helm 1.11.0 (#2182) reserve pod eip static route when update vpc (#2185) ignore conflict check for pod ip crd (#2188) remove unused subnet status fields (#2178) fix:react leader elect (#2167) fix base/windows build (#2172) add metric interfacerxmulticast_packets (#2156) build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2 (#2168) update wechat link build(deps): bump github.com/Microsoft/hcsshim from 0.9.5 to 0.9.6 (#2161) ci: refactor previous push multi arch (#2164) security: we should check all the vulnerabilities that can be fixed (#2163) An error occurred when netpol was added in double-stack mode (#2160) add process for delete networkpolicy start with number (#2157) security remove private key (#2159) add scheduled e2e testing (#2144) northd: fix race condition in health check (#2154) add check for subnet cidr (#2153) delete nc cmd in image (#2148) bump k8s to v1.26 (#2152) add benchmark test for ipam (#2123) update: add YuDong Wang into MAINTAINERS (#2147) build(deps): bump k8s.io/sample-controller from 0.25.4 to 0.25.5 (#2146) delete nc in base image (#2141) update go modules (#2142) delete ip crd base on podName (#2143) fix vpc spec external not true after init external gw (#2140) refactor ipam unit test (#2126) build(deps): bump github.com/k8snetworkplumbingwg/network-attachment-definition-client (#2139) some optimization for provider network status update (#2135) simplify iptables eip nat (#2137) kind: support to specify api server address/port (#2134) kubectl-ko: fix registry/version (#2133) check if subnet cidr is correct (#2136) fix: sometimes alloc ipv6 address failed sometimes ipam.GetStaticAddress return

(#2132) fix: delete static route should consider dualstack (#2130) build(deps): bump github.com/osrg/gobgp/v3 from 3.8.0 to 3.9.0 (#2121) build(deps): bump github.com/Wifx/gonetworkmanager from 0.4.0 to 0.5.0 (#2122) build(deps): bump golang.org/x/time from 0.2.0 to 0.3.0 (#2120) fix: vlan gw clean in 2 scene (#2117) optimize provider network (#2099) build(deps): bump golang.org/x/sys from 0.2.0 to 0.3.0 (#2119) fix removing default static route in default vpc (#2116) fix: eip deletion (#2118) fix: ecmp route keep delete and recreate (#2083) fix policy route for subnets with logical gateway (#2108) build(deps): bump github.com/emicklei/go-restful/v3 from 3.9.0 to 3.10.1 (#2113) refactor function name isIPAssignedToPod to isIPAssignedToOtherPod (#2096) build(deps): bump github.com/onsi/gomega from 1.24.0 to 1.24.1 (#2111) fix: logical gw underlay gw subnet not clean (#2114) build(deps): bump github.com/osrg/gobgp/v3 from 3.6.0 to 3.8.0 (#2110) build(deps): bump sigs.k8s.io/controller-runtime from 0.12.3 to 0.13.1 (#2109) fix go mod (#2107) build(deps): bump github.com/onsi/ginkgo/v2 from 2.3.1 to 2.5.1 (#2103) build(deps): bump k8s.io/sample-controller from 0.24.4 to 0.25.4 (#2101) build(deps): bump github.com/Microsoft/go-winio from 0.5.2 to 0.6.0 (#2104) build(deps): bump google.golang.org/grpc from 1.49.0 to 1.51.0 (#2102) build(deps): bump github.com/Microsoft/hcsshim from 0.9.4 to 0.9.5 (#2100) Create dependabot.yml replace klog.Fatalf with klog.ErrorS and klog.FlushAndExit (#2093) fix: slow vip finalizer operation (#2092) ko-trace: support ARP request/reply (#2046) fix: cni response missing sandbox field (#2089) check if externalIds map is nil when add node as gw for centralized subnet (#2088) fix: del createIPS (#2087) fix: add opts for ips del (#2079) fix ovs bridge not deleted cause by port link not found (#2084) fix libovsdb issues (#2070) ipset: fix unknown ipset data attribute from kernel (#2086) fix: vpc lrp reset after restart kube-ovn-controller (#2074) fix: add del bash for redundant ips (#2063) refactor: add unknown config to logic switch port (#2067) ovs-dpdk supports adding bond for multi-NICs (#2064) fix OVN LS/LB gc (#2069) fix: vip ipam not recover all (#2071) bug-fix: make kind-reload invalid (#2068) remove no need params svcasname (#2057) Fix:hybrid-dpdk with vxlan tunnel modeThe OVS node does not create a VXLAN tunnel to the OVS-DPDK node (#2065) update ipv6 address for vpc peer (#2060) perf: reduce controller init time (#2054) reflactor note (#2053) fix: replace replace with add to override existing route (#2052) refactor Makefile (#1901) pass klog verbosity to libovsdb (#2048) ovs: fix reaching resubmit limit in underlay (#2038) sync crd yamls (#2040) add helm and e2e test (#2020) fix: add unitest (#2030) fix: pod not add finalizer after add iptables fip (#2041) feat: ovn eip snat fip (#2029) fix: vpc and vpc nat gw not clean (#2032) update CHANGELOG.md fix pinger namespace error (#2034) iptables: avoid duplicate logging (#2028) fix: gateway route should stay still when node is pingable (#2011) update np name with character prefix (#2024) bump kind and node image versions (#2023) fix ovn nb/sb health check (#2019) fix ovs fdb for the local bridge port (#2014) fix go version perf: add debug info for perf trace (#2017) fix: not append finalizer (#2012) do not need to delete pg when update networkpolicy (#1959) test: add test-server to collect packet lost during upgrade (#2010) support create iptables fip and eip automatically if pod enable fip (#1993) ci: upgrade deprecated actions (#2004) fix: make ip deletion the same as creation (#2002) fix: Add support for Mellanox NIC (#1999) fix: nat gw not enqueue its resources (#1996) fix: delete fiprule failed at first time (#1998) fix typo (#1994) feat: now interface for containerd could be inspected (#1987) fix: snat conntrack race (#1985) add check of write to ovn sb db for ovn-controller (#1989) fix grep matching device in routes (#1986) delete pod after TerminationGracePeriodSeconds (#1984) ovs: fix waiting flows in underlay

(#1983) feature: support default vpc use nat gw pod as cust vpc (#1979) ovn db: recover automatically on startup if db corruption is detected (#1980) fix: modify src route priority (#1973) upgrade ovs-ovn pod by generation version instead of chart version (#1960) avoid concurrent subnet status update (#1976) fix metrics name (#1977) add vm pod to ipam by ip when initIPAM (#1974) validate nbctl socket path in start-controller.sh (#1971) skip CVE-2022-3358 (#1972) fix version mismatch between the Ginkgo CLI and the imported package (#1967) ovs: fix mac learning in environments with hairpin enabled (#1943) fix: add default deny acl (#1935) Fix registry for ovn-central container in install.sh (#1951) ovs: add fdb update logging (#1941) add chart version check when upgrade ovs-ovn pod (#1942) fix underlay e2e testing (#1929) set leader flag when get leader (#1939) set ovsdb-server vlog level to avoid warnings caused by ovs-vsctl (#1937) fix: UpdateNatRule will error when logicalIP, externalIP is different protocol; replace : to \\: when IPv6 in ovs cli. fix: noAllowLiveMigration port can't sync vips (#7) fix: add pod not update vip virtual port fix: delete chassis (#1927) fix: pod mistaken ls label (#1925) ignore pod without lsp when add pod to port-group (#1924) add network partition check in ovn probes (#1923) fix: fip unbind can't take effect immediately when conntrack record exists (#1922) No need to change deivceID to sriov_netdevice. (#1904) update ns annotation when subnet cidr changed (#1921) fix EIP/SNAT on dynamic Pod annotation (#1918) fix: eip and nat crd can delete even if nat gw pod deleted and ipatab (#1917) fix missing crd (#1909) Nat gw support toleration (#1907) Update USERS.md (#1908) fix typo (#1897) fix: Make the /sys directory in ovs-ovn-dpdk pod writable (#1899) fix: failed to add eip (#1898) fix: gatewaynode might be null (#1896) ci: increase golangci-lint timeout (#1894) update Go to version 1.19 (#1892) fix: api rollback (#1895) ci: use concurrency to ensure that only a single workflow (#1850) kubectl-ko: turn off pipefail for ovn leader check (#1891) kubectl-ko: fix trace for KubeVirt VM (#1802) fix duplicate logs for leader election (#1886) fix setting ether dst addr for dnat (#1881) change the prtocol string to const (#1887) refactor iptables rules (#1868) cni should handler unmont volume, when delete pod. (#1873) delete and recreate netem qos when update process (#1872) feat: check configuration (#1832) security: conform to gosec G114 (#1860) update CHANGELOG.md e2e: add timeout for waiting resources to be ready (#1871) upgrade to Ginkgo v2 (#1861) feat: reduce downtime by increasing arp cache timeout feat: reduce wait time by counting the flow num. fix: missing stopovndaemon args fix: nat gw pod should set default gw to net1 so that to access public (#1864) delete log severity for drop acl when update networkpolicy (#1863) ovs: fix log file descriptor leak in monitor process (#1855) fix: dnat port not use whole words to check (#1854) fix ovs-ovn logging (#1848) fix ovn dhcp not work with ovs-dpdk (#1853) docs: Update USERS.md (#1851) fix: multus macvlan ipvlan use kube-ovn ipambut ip not inited in init-ipam (#1843) fix underlay e2e (#1828) fix arping error log (#1841) ko: fix kube-proxy check (#1842) base: use patch from OVN upstream (#1844) ci: switch environment to ubuntu-20.04 (#1838) ci: split image builds to speed up jobs (#1807) ci: update Go cache to speed up jobs (#1829) windows: fix ovs/ovn versions and patches (#1830) ovs-ovn-dpdk ovs vhostuserclient port (#1831) support adding routes in underlay Pods for access to overlay Pods (#1762) update centralized subnet gateway ready patch operation (#1827) remove pod security

(#1822) fix duplicate log for tunnel interface decision (#1823) update ovs/ovn version to fix hardware offload (#1821) fix: use full longest word to match full ip about dnat (#1825) update centralize subnet gatewayNode until gw is ready (#1814) initialize IPAM from IP CR with empty PodType for sts Pods (#1812) feat: add editable ovn-ic (#1795) kubectl-ko: fix missing env-check (#1804) kubectl-ko: fix destination mac (#1801) fix cilium e2e (#1759) abort kube-ovn-controller on leader change (#1797) avoid invalid ovn-nbctl daemon socket path (#1799) update CHANGELOG.md Perf/memleak (#1791) delete htb qos when releated annotation is deleted (#1788) Fix nag gw gc (#1783) fix iptables for services with external traffic policy set to Local (#1773) perf: reduce metrics labels (#1784) northd: remove lookuparpip actions (#1780) fix: 5ms is too short for eip and nats creation (#1781) Lb-svc supports custom VPCs (#1779) fix ovnic e2e (#1763) fix iptables for service traffic when external traffic policy set to local (#1728) set sysctl variables on cni server startup (#1758) fix: add omitempty to subnet spec (#1765) perf: replace jemalloc to reduce memory usage (#1764) avoid patch interface deletion & recreation during restart (#1741) feature: support exchange link names of OVS bridge and provider nic in underlay networks (#1736) dpdk-v2 --with-hybrid-dpdk Dockerfile.base-dpdk ovs-dpdk (#1754) fix: Adjust order for Log and output err when get NatRule faild. (#1751) only support IPv4 snat in vpc-nat-gw when internal subnet is dual (#1747) update README.md docs: update USERS.md (#1743) style: import group ordering. (#1742) enqueue subnets after vpc update (#1722) do not add subnet not processed by kube-ovn to vpc (#1735) dpdk-v2 --with-hybrid-dpdk qemu sock (#1739) fix: const extGw may expired, after subnet updated, so use ipam subne (#1730) fix service not working when a node's IPv6 address is before the IPv4 address (#1724) update pr template fix: If pod has snat or eip, also need delete staticRoute when delete pod. (#1731) optimize lrp create for subnet in vpc (#1712) fix: cancel delete staticroute when it's used by NatRule (#1733) fix: wrong info when update subnet from dual to ipv4 or ipv6. (#1726) change: add newline at end of file (#1717) add kernel prerequisite for Rocky Linux 8.6 (#1713) Add CODE_STYLE.md (#1711) Change system-cluster-critical to system-node-critical to prevent pods of DaemonSet type from being (#1709) Develop custom vpc-dns (#1662) fix CVE-2022-30065 (#1710) fix: add and set ENABLEKEEPVM_IP=true to keep vm ip (#1702) update CHANGELOG.md fix overlay MTU in vxlan/stt tunnels (#1693) fix: response has no gw when create nic without default route (#1703) add note in install.sh for install --with-hybrid-dpdk(dpdk-v2). (#1699) ignore ovsdb-server/compact error: not storing a duplicate snapshot (#1691) Get latest vpc data from apiserver instead of cache (#1684) support kubernetes v1.24 (#1553) update priority range in htb qos (#1688) fix: clean vip eip snat dant fip in cleanup.sh (#1690) update: add Bingbing Zhang into MAINTAINERS (#1687) fix: move away words that is considered offensive after k8s v1.20.0 (#1682) update CHANGELOG.md add upgrade-ovs script (#1681) fix: change ovn-ic static route to policy (#1670) Delete pod if subnet of the pod's owner(sts/vm) updated (#1678) Develop switch lb rule (#1656) do not snat packets only for subnets with distributed gateway when external traffic policy is set to local (#1616) refactor: extract external routes from eip func, make it the same as (#1671) add loadbalancer service (#1611) bgp: consolidate service check and use service const (#1674) security: disable pprof by default (#1672) fix bgp: sync service cache (#1673) fix iptables for direct routing (#1578) feature: support pod use static

(#1650) fix: kubectl-ko does't work when ovn-nb, ovn-sb and ovn-northd master slave Switchover (#1669) mount modules for auto load ip6tables moudles (#1665) update docs links fix: subnet failed when create without protocol (#1653) ignore pod not scheduled when reconcile subnet (#1666) fix libovsdb (#1664) fix ovs-ovn not running on newly added nodes (#1661) fix get security group name by external_ids (#1663) fix:can not delete pod with sriov vf (#1654) add policy route when add subnet (#1655) update CHANGELOG.md fix: no need routed when use v1.multus-cni.io/default-network (#1652) docs: add GOVERNANCE.md and SECURITY.md fix: should go on check ip after occupied ip (#1649) set ether dst addr for dnat on logical switch (#1512) docs: update README.md CI: delete resources in order to avoid a long time waiting for subnet deletions. (#1643) ci: fix golangci-lint (#1639) Update install.sh (#1645) fix: make sure pod annotation switch is the first choice to allocate ip, and fix vpc nat sts not delete (#1640) docs: update docs link set networkpolicy log default to false (#1633) update policy route when join subnet cidr changed (#1638) fix: diskfull may lead to wrong raft status for ovs db (#1635) ci: update trivy options (#1637) fix no interface report to multus cni, missing in k8s.v1.cni.cncf.io/network[s]-status (#1636) change vp gw pod workload from deployment to statefulset (#1630) increase initial delay of ovs-ovn liveness probe (#1634) fix: cleanup should ignore patch failed (#1626) delete "allow" policy route on subnet deletion (#1628) wait ovn-central pods running before delete ovs-ovn pods (#1627) vip, eip support ipv6 vip count (#1624) ci: auto changelog now (#1625) get dbstatus for all ovn-central pod (#1619) refactor: use ConfigMap resourceVersion to check if ovn-vpc-nat-gw-config changed (#1617) fix controller exit before process pod update event (#1621) docs: update ROADMAP.md fix acl log name too long (exceed 63) (#1612) docs: Add High-level design of ovn-spekaer (#1609) docs: Fix allowed subnets (#1610) add cni log Prevent "for loop time" approximately health check time (#1606) docs:Add Usage of ovn-speaker for passivemode and ebgp-multihop (#1605) update static ip docs (#1607) Modify the next hop calculation method for kube-ovn-speaker (#1604) fix static ip error in dual stack (#1598) ci: build amd64 images without avx512 (#1584) Add ebgp-multihop function for kube-ovn-speaker (#1601) monitor dns in cilium e2e (#1597) Add passivemode for kube-ovn-speaker (#1600) Bump github.com/emicklei/go-restful/v3 from 3.7.4 to 3.8.0 (#1599) docs: fix the kind name (#1593) Support CNI VESION command (#1596) update ovs health check, delete connection to ovn sb db (#1588) fix ovn-ic doc err (#1590) fix: all cluster pod will be in podadd queue (#1587) feat: add args for gc/inspect interval (#1572) fix: Do not Recreate LogicalRouterPort when Vpc recreated (#1570) optimized initialization and gc for the chassis (#1511) fix pod could not be ready (#1562) Fix incorrect usage info of 'argExternalGatewayNet' (#1567) fix: delete pod panic when delete vm or statefulset. (#1565) fix: clean CRDs introduced by new vpc-nat-gateway (#1563) do not gc vm pod lsp when vm still exists (#1558) (#1561) do not delete static routes on controller startup (#1560) update alpine to v3.16 (#1559) fix VPC document (#1554) replace ovn-nbctl daemon with libovsdb in frequent operations (#1544) fix exec cmd in vpc nat gateway (#1556) CNI: do not return route if nic is not eth0 (#1555) do not nat packets for incoming traffic when (#1552) add kubeovn 1.9.2 charts (#1539) fix: opt kubectl-ko install solution (#1550) always set mac address to sriov vf (#1551) use leases for leader election (#1529) fix: fix db-check bug (#1541) bump version to v1.11.0 (#1545) exit kube-ovn-controller on stopped leading (#1536) fix: update check script for restart ovs-ovn after rebuild

(#1534) tmp cancel cilium external svc test (#1531) remove name for default drop acl in networkpolicy (#1522) Alex Jones Chris Kaihang Zhang KillMaster9 Mengxin Liu Money Liu Noah ShaPoHun Usman Malik Wang Bo Xiaobo Liu bobz965 carezkh changluyi dependabot[bot] fanriming gugu halfcrazy huangsq hzma jeffy long.wang lut777 pengbinbin1 runzhliu shane wangyd1988 xujunjie-cover zhouhui-Corigine * * prepare for release v1.10.10 ensure address label is correct before deleting it (#2487) add node to addNodeQueue if required annations are missing (#2481) remove unused subnet status fields (#2482) fix ips CR not found due to etcd error (#2472) ci: fix ovn-ic installation (#2456) do not set subnet's vlan empty on failure (#2445) fix: missing import netlink change cni version from v1.1.1 to v1.2.0 (#2435) fix ovn-speaker router bug (#2433) fix ovn-ic e2e ci: fix cilium chaining e2e (#2391) fix: python package issues update ipv6 security-group remote group name (#2389) Fix routeregexp ipv6 (#2395) ci: fix ref name check (#2390) bump base images ci: skip netpol e2e automatically for push events (#2379) ci: make path filter more accurate (#2381) ci: fix path filter for windows build (#2378) e2e: run specs in parallel (#2375) fix CVE-2022-41723 ci: fix default branch test (#2369) fix github actions workflows (#2363) simplify github actions workflows (#2338) use existing node switch cidr instead of the configured one (#2359) do not remove link local route on ovn0 (#2341) fix encap ip when the tunnel interface has multiple addresses (#2340) enqueue endpoint when handling service add event (#2337) fix getting service backends in dual-stack clusters (#2323) fix github actions workflow prepare for release v1.10.9 fix u2o code err fix kube-ovn-controller crash on startup (#2305) fix gosec ci installation (#2295) ovn northd: fix connection inactivity probe (#2286) fix ct new config error fix network break on kube-ovn-cni startup (#2272) fix setting mtu for ovs internal port (#2247) fix gosec installation bump base image version fix ovn patches ovn db: add support for listening on pod ip (#2235) add enable-metrics arg to disable metrics (#2232) fix not building no-avx512 image (#2228) u2o feature merge to 1.10 (#2227) fix windows build add release-1.8/1.9/1.10 to scheduled e2e (#2224) cni-server: fix waiting for routed annotation (#2225) release-1.10: refactor e2e (#2213) feature: detect ipv4 address conflict in underlay (#2208) set release v1.10.8 Daviddcc KillMaster9 changluyi hzma zhangzujian * prepare for release 1.10.8 ci: add publish action ovn nb and sb can't bind lan ip in ssl merge to 1.10 (#2202) bind local ip release 1.10 (#2198) fix: ovs gc just for pod if (#2187) update docs link in install.sh (#2196) fix lr policy for default subnet with logical gateway enabled (#2177) sync delete pod process from release-1.9 reserve pod eip static route when update vpc (#2185) ignore conflict check for pod ip crd (#2188) fix base/windows build (#2172) add metric interfacerxmulticast_packets (#2156) An error occurred when netpol was added in double-stack mode (#2160) add process for delete networkpolicy start with number (#2157) northd: fix race condition in health check (#2154) add check for subnet cidr (#2153) delete nc cmd in image (#2148) delete ip crd base on podName (#2143) some optimization for provider network status update (#2135) kind: support to specify api server address/port (#2134) kubectl-ko: fix registry/version (#2133) fix: sometimes alloc ipv6 address failed sometimes ipam.GetStaticAddress return NoAvailableAddress fix: delete static route should consider dualstack (#2130) optimize provider network (#2099) fix removing default static route in default vpc (#2116) fix: cni response missing sandbox field (#2089) fix: eip deletion (#2118) fix policy route for subnets with logical gateway (#2108) replace klog.Fatalf with klog.ErrorS and klog.FlushAndExit (#2093) fix: del

(#2087) check if externalIds map is nil when add node as gw for centralized subnet (#2088) fix ovs bridge not deleted cause by port link not found (#2084) fix libovsdb issues (#2070) ipset: fix unknown ipset data attribute from kernel (#2086) reflactor: add unkown config to lsp fix OVN LS/LB gc (#2069) Fix:hybrid-dpdk with vxlan tunnel modeThe OVS node does not create a VXLAN tunnel to the OVS-DPDK node (#2065) update ipv6 address for vpc peer (#2060) perf: reduce controller init time (#2054) fix: replace replace with add to override existing route (#2052) pass klog verbosity to libovsdb (#2048) use the latest base image ovs: fix reaching resubmit limit in underlay (#2038) fix: vpc and vpc nat gw not clean (#2032) fix: install the latest version (#2036) Mengxin Liu bobz965 changluyi fanriming hzma lut777 wangyd1988 zhangzujian * * set release for 1.10.7 fix: Add support for Mellanox NIC (#1999) fix pinger namespace error (#2034) increase action timeout prepare release for 1.10.7 fix: gateway route should stay still when node is pingable (#2011) iptables: avoid duplicate logging (#2028) update np name with character prefix (#2024) bump kind and node image versions (#2023) fix ovn nb/sb health check (#2019) fix ovs fdb for the local bridge port (#2014) do not need to delete pg when update networkpolicy (#1959) ci: upgrade deprecated actions (#2004) fix: make ip deletion the same as creation (#2002) fix: delete fiprule failed at first time (#1998) add check of write to ovn sb db for ovn-controller (#1989) fix grep matching device in routes (#1986) delete pod after TerminationGracePeriodSeconds (#1984) ovs: fix waiting flows in underlay networking (#1983) feature: support default vpc use nat gw pod as cust vpc (#1979) ovn db: recover automatically on startup if db corruption is detected (#1980) fix: modify src route priority (#1973) fix CVE-2022-32149 avoid concurrent subnet status update (#1976) upgrade ovs-ovn pod by generation version instead of chart version (#1960) fix metrics name (#1977) add vm pod to ipam by ip when initIPAM (#1974) validate nbctl socket path in start-controller.sh skip CVE-2022-3358 (#1972) use latest base image fix: add default deny acl (#1935) ovs: fix mac learning in environments with hairpin enabled (#1943) Fix registry for ovn-central container in install.sh (#1951) ovs: add fdb update logging (#1941) add chart version check when upgrade ovs-ovn pod fix underlay e2e testing (#1929) set leader flag when get leader set ovsdb-server vlog level to avoid warnings caused by ovs-vsctl (#1937) fix: pod mistaken ls label (#1925) ignore pod without lsp when add pod to port-group add network partition check in ovn probes update ns annotation when subnet cidr changed (#1921) fix CVE-2022-27664 fix EIP/SNAT on dynamic Pod annotation (#1918) fix: eip and nat crd can delete even if nat gw pod deleted and ipatab (#1917) fix: failed to add eip (#1898) ci: increase golangci-lint timeout (#1894) fix: gatewaynode might be null (#1896) fix: api rollback fix: diskfull may lead to wrong raft status for ovs db (#1635) kubectl-ko: turn off pipefail for ovn leader check (#1891) update dpdk base image kubectl-ko: fix trace for KubeVirt VM (#1802) fix duplicate logs for leader election (#1886) fix setting ether dst addr for dnat (#1881) refactor iptables rules (#1868) cni should handler unmont volume, when delete pod. (#1873) delete and recreate netem qos when update process (#1872) feat: check configuration (#1832) fix: nat gw pod should set default gw to net1 so that to access public (#1864) Kaihang Zhang Mengxin Liu Noah bobz965 hzma jeffy long.wang lut777 runzhliu shane zhangzujian * set release

feat: reduce downtime by increasing arp cache timeout feat: reduce wait time by counting the flow num. fix: missing stopovndaemon args delete log severity for drop acl when update networkpolicy refactor: extract external routes from eip func, make it the same as (#1671) prepare release for 1.10.6 ovs: fix log file descriptor leak in monitor process (#1855) fix ovs-ovn logging (#1848) fix: dnat port not use whole words to check (#1854) fix ovn dhcp not work with ovs-dpdk (#1853) update base image fix: add and set ENABLEKEEPVM_IP=true to keep vm ip (#1702) fix: multus macvlan ipvlan use kube-ovn ipambut ip not inited in init-ipam (#1843) fix underlay e2e (#1828) fix arping error log (#1841) ko: fix kube-proxy check (#1842) base: use patch from OVN upstream (#1844) ci: switch environment to ubuntu-20.04 (#1838) ovs-ovn-dpdk ovs vhostuserclient port (#1831) windows: fix ovs/ovn versions and patches (#1830) update centralized subnet gateway ready patch operation (#1827) fix duplicate log for tunnel interface decision (#1823) update ovs/ovn version to fix hardware offload (#1821) fix: use full longest word to match full ip about dnat (#1825) update centralize subnet gatewayNode until gw is ready (#1814) initialize IPAM from IP CR with empty PodType for sts Pods (#1812) kubectl-ko: fix missing env-check (#1804) kubectl-ko: fix destination mac (#1801) abort kube-ovn-controller on leader change (#1797) avoid invalid ovn-nbctl daemon socket path (#1799) update vpc-nat-gateway base fix: warning for empty chassis fixed (#1787) bobz965 hzma long.wang lut777 zhangzujian * set release v1.10.5 prepare for release v1.10.5 delete htb qos when releated annotation is deleted (#1788) perf: fix memory leak perf: disable mlockall to reduce memory usage fix iptables for services with external traffic policy set to Local (#1773) perf: reduce metrics labels (#1784) northd: remove lookuparpip actions (#1780) fix install error fix:can not delete pod with sriov vf (#1654) dpdk-v2 --with-hybrid-dpdk Dockerfile.base-dpdk ovs-dpdk (#1754) dpdk-v2 --with-hybrid-dpdk qemu sock (#1739) feature: support exchange link names of OVS bridge and provider nic in underlay networks (#1736) support kubernetes v1.24 (#1761) use leases for leader election (#1529) fix iptables for service traffic when external traffic policy set to local (#1728) set sysctl variables on cni server startup (#1758) fix: add omitempty to subnet spec perf: replace jemalloc to reduce memory usage avoid patch interface deletion & recreation during restart (#1741) only support IPv4 snat in vpc-nat-gw when internal subnet is dual (#1747) enqueue subnets after vpc update (#1722) do not add subnet not processed by kube-ovn to vpc (#1735) dpdk-v2 --with-hybrid-dpdk qemu sock (#1739) fix: If pod has snat or eip, also need delete staticRoute when delete pod. (#1731) optimize lrp create for subnet in vpc (#1712) fix: cancel delete staticroute when it's used by NatRule (#1733) fix: wrong info when update subnet from dual to ipv4 or ipv6. (#1726) fix overlay MTU in vxlan/stt tunnels (#1693) Mengxin Liu hzma long.wang xujunjie-cover zhouhui-Corigine * set release 1.10.4 prepare for release 1.10.4 fix: response has no gw when create nic without default route (#1703) ignore ovsdb-server/compact error: not storing a duplicate snapshot Get latest vpc data from apiserver instead of cache (#1684) update priority range in htb qos (#1688) fix: clean vip eip snat dant fip in cleanup.sh (#1690) add upgrade-ovs script (#1681) Mengxin Liu Wang Bo bobz965 hzma xujunjie-cover zhangzujian set release 1.10.3 prepare for release 1.10.3 fix: change ovn-ic static route to policy (#1670) fix: Do not Recreate LogicalRouterPort when Vpc recreated (#1570) Delete pod if subnet of the pod's owner(sts/vm)

(#1678) do not snat packets only for subnets with distributed gateway when external traffic policy is set to local (#1616) security: disable pprof by default (#1672) bgp: consolidate service check and use service const (#1674) fix bgp: sync service cache (#1673) fix iptables for direct routing (#1578) fix libovsdb (#1664) mount modules for auto load ip6tables moudles (#1665) ignore pod not scheduled when reconcile subnet (#1666) fix ovs-ovn not running on newly added nodes (#1661) fix get security group name by external_ids (#1663) add policy route when add subnet (#1655) Mengxin Liu Money Liu Wang Bo gugu hzma lut777 wangyd1988 * set for release 1.10.2 fix: no need routed when use v1.multus-cni.io/default-network (#1652) prepare for release 1.10.2 fix: subnet failed when create without protocol set ether dst addr for dnat on logical switch (#1512) CI: delete resources in order to avoid a long time waiting for subnet deletions. (#1643) ci: fix golangci-lint (#1639) fix: cleanup should ignore patch failed (#1626) fix no interface report to multus cni, missing in k8s.v1.cni.cncf.io/network[s]-status (#1636) Update install.sh (#1645) set networkpolicy log default to false (#1633) update policy route when join subnet cidr changed (#1638) ci: update trivy options (#1637) increase initial delay of ovs-ovn liveness probe (#1634) wait ovn-central pods running before delete ovs-ovn pods (#1627) get dbstatus for all ovn-central pod (#1619) delete "allow" policy route on subnet deletion (#1628) Mengxin Liu ShaPoHun halfcrazy hzma xujunjie-cover zhangzujian * monitor dns in cilium e2e (#1597) prepare for release 1.10.1 ci: build amd64 images without avx512 (#1584) update ovs health check, delete connection to ovn sb db (#1588) fix: all cluster pod will be in podadd queue (#1587) fix pod could not be ready (#1562) fix: delete pod panic when delete vm or statefulset. (#1565) fix: clean CRDs introduced by new vpc-nat-gateway (#1563) do not gc vm pod lsp when vm still exists (#1558) do not delete static routes on controller startup (#1560) replace ovn-nbctl daemon with libovsdb in frequent operations (#1544) fix exec cmd in vpc nat gateway (#1556) CNI: do not return route if nic is not eth0 (#1555) do not nat packets for incoming traffic when service externalTrafficPolicy is Local exit kube-ovn-controller on stopped leading (#1536) tmp cancel cilium external svc test (#1531) hzma lut777 xujunjie-cover zhangzujian * release 1.10.0 use inc-engine/recompute instead of deprecated recompute (#1528) update kind to v0.13.0 (#1530) move dumb-init from base images to kube-ovn image (#1527) fix installing dumb-init in arm64 image (#1525) optimize ovs request in cni (#1518) optimize node port-group check (#1514) logic optimization (#1521) fix defunct ovn-nbctl daemon (#1523) fix arm image (#1524) fix: keep vm's and statefulset's ips when user specified subnet (#1520) feature: add doc for tunning packages (#1513) add document for windows support (#1515) reduce ovs-ovn restart downtime (#1516) finish basic windows support (#1463) refactor logical router routes (#1500) add netem qos when create pod (#1510) handle the case of error node cidr (#1509) fix: ovs trace flow always ends with controller action (#1508) add qos e2e test (#1505) optimize IPAM initialization (#1498) test: fix flaky test (#1506) docs: update README.md synchronize yamls with installation script (#1504) feature: svc of multiple clusters (#1491) use OVS branch-2.17 (#1495) Update USERS.md (#1496) update document for mellanox hardware offload (#1494) Feature iptables eip nats splits (#1437) Update USERS.md (#1493) update github actions (#1489) update USER.md (#1492) fix: add empty chassis check in ovn db (#1484) feat: lsp forwarding external Layer-2 packets (#1487) base: add back kubectl (#1485) delete ipam record when gc lsp (#1483) fix: wrong vpc-nat-gateway arm image (#1482) fix pod annotation may override by patch (#1480) add acl doc (#1476) fix: workqueue_depth should show count not

(#1478) add delete ovs pods after restore nb db (#1474) delete monitor noexecute toleration (#1473) add env-check (#1464) Support kubevirt vm live migrate for pod static ip (#1468) fix routes for packets from Pods to other nodes add manual compile method for ubuntu20.04 (#1461) append metrics (#1465) Annotation network_type always is geneve masquerade packets from Pods to service IP update OVS and OVN for windows windows support for cni server add kube-ovn-controller switch for EIP and SNAT docs: add USERS.md (#1454) update topology pic feature: add sb/nb db check bash script (#1441) add routed check in circulation (#1446) modify init ipam by ip crd only for sts pod (#1448) base: refactor ovn/ovs build (#1444) log: show the reason if get gw node failed (#1443) add doc for #1358 (#1440) prepare windows support for cni server modify webhook img to independent image (#1442) update alpine to fix CVE-2022-1271 fix adding key to delete Pod queue fix IPAM initialization temporary cancel the external2cluater e2e test for cilium (#1428) ignore all link local unicast addresses/routes fix error handling for netlink.AddrDel replace pod name when create ip crd (#1425) add webhook vaildate the vpc resource whether can be deleted. (#1423) We are looking forward to your PR! (#1422) support alloc static ip from any subnet after ns supports multi subnets (#1417) fix provider-networks status build ovs/ovn for windows in ci cilium e2e: deploy k8s without kube-proxy windows support for CNI add simple e2e for multus integration update e2e testing recover ips CR on IPAM initialization docs: update ROADMAP.md and MAINTAINERS create ip crd in kube-ovn-controller (#1413) add condition for triggering the deletion of redundant chassises in sbdb (#1411) fix: do not recreate port for terminating pods (#1409) update cni version to 1.0 update underlay environment requirements avoid frequent ipset update add reset for kube-ovn-monitor metrics (#1403) fix: The underlay physical gateway config by external-gw-addr when use snat&eip (#1400) add custom acls for subnet (#1395) check the cidr format whether is correct (#1396) optimize docs due to frequently asked question. (#1393) adding IP Protocol enumeration to CRD can reduce the kube-ovn Controller judgment logic (#1391) change the wechat qcode append vm deletion check (#1390) We should handle the case where the subnet protocol is handled (#1373) VIP is decoupled from port security (#1389) chore: reduce image size (#1388) docs: update the maintainer and roadmap (#1387) ci: update kind and k8s fix external egress gateway add missing link scope routes in vpc-nat-gateway update nodeips for restore cmd in ko plugin increase memory limit of ovn-central fix range loop fix probe error update script to add restore plugin cmd support dpdk (#1317) Use camel case instead of snake case add detail error when failed to create resource add restore process for ovn nb db add reset porocess for ovs interface metrics fix SNAT/PR on Pod startup optimize kube-ovn-monitor yaml Update subnet.go feat: add webhook to check subnet deletion. modify ipam v6 release ip problem skip ping gateway for pods during live migration don't check conflict for migration pod with only static mac add service cidr when init kubeadm docs: add provide and ns spec for multus crd update flag parse in webhook fix usage of ovn commands add check for pod update process log: rotate all logs in kube-ovn-cni and add compress keep ip for kubevirt pod docs: add integration with Corigine OVS offload fix OVS bridge with bond port in mode 6 fix: continue of deletion for del pod failed when can't found vpc or

(#1335) feat: support DHCP Fix usage of ovn commands resync provider network status periodically Revert "resync provider network status periodically" use const instead the string when update gateway info, we should append old to new deploy resync provider network status periodically fix underlay subnet in custom VPC fix ips update kube-ovn CNI (#1318) delete the logic of repeated enqueueing add log to file, update upgrade script Temporarily comment out the compile and upload of the centos8 compile container. Revert "Temporarily comment out the compile and upload of the centos8 compile" Temporarily comment out the compile and upload of the centos8 compile container. feat: add webhook for subnet update validation optimized decision logic Use camel case instead of snake case append add cidr and excludeIps annotation for namespace feat: vpc peering connection Remove excess code chore: show install options when installing (#1293) feat: update provider network via node annotation add container compile and insmod add policy route for centralized subnet fix: replace ecmp dphash with hash by srcip (#1289) Use go to rerimplement ovn-is-leader.sh (#1243) fix: only log matched svc with np (#1287) feat: Replace command health check with k8s tcpSocket check (#1251) add 'virtual' port for vip (#1278) skip the missing of kube-dns (#1286) fix: check if taint exists before un-taint add policy route for distributed subnet in default vpc ci: add retry to fix flaky test set up tunnel correctly in hybrid mode check static route conflict fix: https://github.com/kubeovn/kube-ovn/issues/1271#issue-1108813998 transfer IP/route earlier in OVS startup delete unused constant add metric for ovn nb/sb db status add gateway check after update subnet we should first see if a condition is not going to be met add judge before use slices index prevent multiple namespace reconcile prevent multiple namespace reconcile fix: validate statefulset pod by name fix golang and base image versions add back centralized subnet active-standby mode support to add multiple subnets for a namespace prepare for next release Support only configure static mac_address Cookie Wang Fudankenshin Mengxin Liu Samuel Liu amoy-xuhao bob199x bobz965 caohuilong chestack fanriming gongysh2004 hackeren halfcrazy hzma jyjiangkai long.wang lut777 pengbinbin1 wang_yudong wangyd1988 xujunjie xujunjie-cover yi.luo zhangzujian * * set release 1.9.31 Subnet add mtu config 1.9 (#3397) add kube-ovn-controller nodeAffinity prefer not on ic gateway (#3390) Revert "upgrade ovs-ovn pod by generation version instead of chart version (#1960)" (#3386) delete check for existing ip cr (#3361) update go net version (#3351) Iptables wrapper 1.9 (#3341) add type assertion for ip crd (#3311) prepare for the next release changluyi hzma * ovs: load kernel module ip_tables only when it exists (#3281) pinger: increase packet send interval (#3259) prepare for the next release * add multicast snoop for release-1.9 (#3192) underlay: fix ip/route tranfer when the nic is managed by NetworkManager (#3184) chart: fix ovs-ovn upgrade (#3164) subnet: fix deleting lr policy on node deletion (#3178) delete append externalIds process in initIPAM (#3134) move unnecessary init process after startWorkers (#3124) delete append externalIds process in initIPAM (#3134) prepare for the next release changluyi hzma * update version to v1.9.28 fix u2o policy route generate too many flow tables cause oom distinguish nat ip for central subnet with ecmp and active-standby (#3100) fix .status.default when initializing the default vpc (#3086) ci: do not pin go version (#3073) ci: fix multus installation (#3062) Revert "prepare for release 1.9.28" set genevsys6081 tx checksum off (#3045) prepare for release 1.9.28 static ip in exclude-ips can be allocated normally when subnet's availableIPs is 0 #3031 ci: pin go version to 1.20.5 (#3034) pinger: use fully qualified domain name (#3032) uninstall.sh: fix ipset

(#3028) fix subnet finalizer (#3004) kubectl ko performance enhance (#2975) (#2992) underlay: fix NetworkManager syncer for virtual interfaces (#2988) underlay: does not set a device managed to no if it has VLAN managed by NM (#2986) changluyi hzma * release 1.9.27 add detail comment prepare for next release Kubectl ko diagnose perf release 1.9 (#2964) underlay: sync NetworkManager IP config to OVS bridge (#2949) typo (#2952) Revert "nm not managed only in the change provide nic name case (#2754)" (#2944) kubectl ko perf on release-1.9 (#2947) u2o support specify u2o ip on release-1.9 (#2935) support tos inherit from inner packet underlay: do not delete patch ports created by ovn-controller (#2851) kubectl-ko: fix trace when u2oInterconnection is enabled (#2836) fix underlay access to node through ovn0 (#2847) fix MTU when subnet is using logical gateway (#2834) changluyi yichanglu * prepare for v1.9.26 fix ip statistics in subnet status (#2769) add EXCHANGELINKNAME to installation script cni-server: wait ovs-vswitchd to be running (#2759) ci: run kube-ovn e2e for underlay (#2762) nm not managed only in the change provide nic name case (#2754) update policy route when change from ecmp to active-standby (#2716) fix ovn lb gc (#2728) fix recover db failed using offical doc (#2721) bump base image base: remove patch for fixing ofpbuf memory leak (#2715) cni-server: do not perform ipv4 conflict detection during VM live migration (#2693) ovn-controller: do not send GARP on localnet for Kube-OVN ports (#2690) netpol: fix packet drop casued by incorrect address set deletion (#2677) fix pg set port fail when lsp is already deleted add subnetstatus lock for handleAddOrUpdateSubnet (#2668) prepare for next release broadcast free arp when pod setup (#2643) delete sync user (#2629) prepare for next release ci: deploy multus in thick mode (#2628) libovsdb: use monitor_cond as the monitor method (#2627) ovs: fix dpif-netlink ofpbuf memory leak (#2620) add debug image ci: fix multus installation (#2604) cut invalid OVNNBDAEMON to make log more readable (#2601) unittest: fix length assertion (#2597) bump base image ci: bump actions/upload-artifact to v3 security: clear .trivyignore underlay: get address/route before setting nm managed to no (#2592) ci: bump kind image to v1.26.3 (#2581) bobz965 changluyi hzma yichanglu zhangzujian * move ipam.subnet.mutex to caller (#2571) fix: memory leak in IPAM caused by leftover map keys (#2566) fix ovn-bridge-mappings deletion (#2564) fix go mod list (#2556) do not set device unmanaged if NetworkManager is not running (#2549) underlay: fix network manager operation (#2546) controller: fix apiserver connection timeout on startup (#2545) underlay: delete altname after renaming the link (#2539) underlay: fix link name exchange (#2516) change version to v1.9.23 fix changging the stopped vm's subnets, the vm cann't start normally (#2463) add kubevirt multus nic lsp before gc process (#2504) update for release v1.9.22 hzma zhangzujian * * ensure address label is correct before deleting it (#2487) add node to addNodeQueue if required annations are missing (#2481) remove unused subnet status fields (#2482) prepare for release v1.9.22 fix ips CR not found due to etcd error (#2472) ci: fix ovn-ic installation (#2456) do not set subnet's vlan empty on failure (#2445) set release v1.9.21 prepare for release v1.9.21 fix: missing import netlink release-1.9 cni version update from v0.9.1 => v1.2.0 (#2434) fix ovn-speaker router bug (#2433) fix chart install/upgrade e2e (#2426) ci: fix cilium chaining e2e (#2391) Fix routeregexp ipv6 (#2395) ci: fix ref name check (#2390) bump base image ovs: fix re-creation of tunnel backing interfaces on restart. ci: skip netpol e2e automatically for push events (#2379) e2e: run specs in

(#2375) Daviddcc KillMaster9 changluyi zhangzujian * fix CVE-2022-41723 ci: fix default branch test (#2369) fix github actions workflows (#2363) simplify github actions workflows (#2338) use existing node switch cidr instead of the configured one (#2359) prepare for 1.9.20 do not remove link local route on ovn0 (#2341) fix encap ip when the tunnel interface has multiple addresses (#2340) enqueue endpoint when handling service add event (#2337) fix getting service backends in dual-stack clusters (#2323) fix github actions workflow fix u2o code err fix kube-ovn-controller crash on startup (#2305) fix gosec ci installation (#2295) ovn northd: fix connection inactivity probe (#2286) fix ct new config error fix network break on kube-ovn-cni startup (#2272) fix gosec installation bump base image version ovn db: add support for listening on pod ip (#2235) add enable-metrics arg to disable metrics (#2232) changluyi hzma zhangzujian * update install.sh prepare release v1.9.19 u2o feature merge to 1.9 (#2226) add release-1.8/1.9/1.10 to scheduled e2e (#2224) cni-server: fix waiting for routed annotation (#2225) feature: detect ipv4 address conflict in underlay (#2208) fix git ref name in e2e release-1.9: refactor e2e (#2210) changluyi zhangzujian * ci: add publish action add netem qos when create pod (#1510) ovn nb and sb can't bind lan ip in ssl merge to 1.9 (#2201) ci: load image to kind for helm install prepare for release v1.9.18 local ip bind to service merge to release 1.9 (#2197) fix: change condition to conditions fix: ovs gc just for pod if (#2187) update docs link in install.sh (#2196) Release 1.9 (#2181) ignore conflict check for pod ip crd (#2188) Mengxin Liu changluyi hzma lut777 tonyleu * An error occurred when netpol was added in double-stack mode (#2160) add process for delete networkpolicy start with number (#2157) prepare for release 1.9.17 security: remove private key file security: fix security issues update version to v1.9.16 in install.sh add check for subnet cidr (#2153) delete nc cmd in image (#2148) some optimization for provider network status update (#2135) kind: support to specify api server address/port (#2134) fix: sometimes alloc ipv6 address failed sometimes ipam.GetStaticAddress return NoAvailableAddress optimize provider network (#2099) Revert "optimize provider network (#2099)" optimize provider network (#2099) Mengxin Liu changluyi fanriming hzma wangyd1988 zhangzujian * prepare for release 1.9.16 fix policy route for subnets with logical gateway (#2108) fix lint replace klog.Fatalf with klog.ErrorS and klog.FlushAndExit (#2093) zhangzujian * prepare for release v1.9.15 fix: del createIPS (#2087) check if externalIds map is nil when add node as gw for centralized subnet (#2088) fix ovs bridge not deleted cause by port link not found (#2084) fix gosec error bump go version to 1.18 fix libovsdb issues (#2070) refactor: add unknown config to lsp (#2076) fix: replace replace with add to override existing route (#2061) fix OVN LS/LB gc (#2069) update ipv6 address for vpc peer (#2060) perf: reduce controller init time (#2054) pass klog verbosity to libovsdb (#2048) use the latest base image ovs: fix reaching resubmit limit in underlay (#2038) fix: vpc and vpc nat gw not clean (#2032) Mengxin Liu bobz965 changluyi hzma lut777 zhangzujian * set release for 1.9.14 fix pinger namespace error (#2034) prepare release for 1.9.14 fix: gateway route should stay still when node is pingable (#2011) update np name with character prefix (#2024) bump kind and node image versions (#2023) fix ovn nb/sb health check (#2019) fix ovs fdb for the local bridge port (#2014) do not need to delete pg when update networkpolicy (#1959) add helm and e2e test (#1992) add check of write to ovn sb db for

(#1989) Noah hzma lut777 zhangzujian * update ovs version to branch-2.16 (#1988) fix grep matching device in routes (#1986) delete pod after TerminationGracePeriodSeconds (#1984) ovs: fix waiting flows in underlay networking (#1983) use latest base image ovn db: recover automatically on startup if db corruption is detected (#1980) prepare for release 1.9.13 fix CVE-2022-32149 avoid concurrent subnet status update (#1976) upgrade ovs-ovn pod by generation version instead of chart version (#1960) fix metrics name (#1977) add vm pod to ipam by ip when initIPAM (#1974) validate nbctl socket path in start-controller.sh skip CVE-2022-3358 (#1972) use latest base image fix: add default deny acl (#1935) ovs: fix mac learning in environments with hairpin enabled (#1943) Fix registry for ovn-central container in install.sh (#1951) ovs: add fdb update logging (#1941) Mengxin Liu hzma lut777 runzhliu zhangzujian * add chart version check when upgrade ovs-ovn pod fix underlay e2e testing (#1929) prepare for release v1.9.12 set leader flag when get leader set ovsdb-server vlog level to avoid warnings caused by ovs-vsctl (#1937) use leases for leader election (#1529) * prepare release 1.9.11 fix: pod mistaken ls label (#1925) ignore pod without lsp when add pod to port-group add network partition check in ovn probes feat: Replace command health check with k8s tcpSocket check (#1251) fix CVE-2022-27664 update ns annotation when subnet cidr changed (#1921) hzma lut777 zhangzujian * set release 1.9.10 prepare for release 1.9.10 fix: gatewaynode might be null (#1896) fix: api rollback fix: diskfull may lead to wrong raft status for ovs db (#1635) kubectl-ko: turn off pipefail for ovn leader check (#1891) fix logrotate issues fix security issues security: conform to gosec G114 (#1860) fix duplicate logs for leader election (#1886) delete and recreate netem qos when update process (#1872) Mengxin Liu hzma lut777 zhangzujian * set release 1.9.9 feat: reduce downtime by increasing arp cache timeout feat: reduce wait time by counting the flow num. fix: missing stopovndaemon args delete log severity for drop acl when update networkpolicy base: use patch from OVN upstream (#1844) prepare release for 1.9.9 ovs: fix log file descriptor leak in monitor process (#1855) fix ovs-ovn logging (#1848) fix: add and set ENABLEKEEPVM_IP=true to keep vm ip (#1702) fix: multus macvlan ipvlan use kube-ovn ipambut ip not inited in init-ipam (#1843) fix underlay e2e (#1828) fix arping error log (#1841) ko: fix kube-proxy check (#1842) ci: switch environment to ubuntu-20.04 (#1838) update centralized subnet gateway ready patch operation (#1827) fix duplicate log for tunnel interface decision (#1823) update centralize subnet gatewayNode until gw is ready (#1814) initialize IPAM from IP CR with empty PodType for sts Pods (#1812) kubectl-ko: fix missing env-check (#1804) kubectl-ko: fix destination mac (#1801) abort kube-ovn-controller on leader change (#1797) avoid invalid ovn-nbctl daemon socket path (#1799) update vpc-nat-gateway base fix: warning for empty chassis fixed (#1786) Mengxin Liu bobz965 hzma lut777 zhangzujian * set release v1.9.8 prepare for release v1.9.8 delete htb qos when releated annotation is deleted (#1788) perf: fix memory leak perf: disable mlockall to reduce memory usage perf: reduce metrics labels (#1784) feature: support exchange link names of OVS bridge and provider nic in underlay networks (#1736) perf: replace jemalloc to reduce memory usage (#1764) fix: add omitempty to subnet spec (#1765) set sysctl variables on cni server startup (#1758) avoid patch interface deletion & recreation during restart (#1741) enqueue subnets after vpc update (#1722) do not add subnet not processed by kube-ovn to vpc (#1735) add logrotate for kube-ovn log (#1740) fix: If pod has snat or eip, also need delete staticRoute when delete

(#1731) fix iptables for service traffic when external traffic policy set to local(#1725) optimize lrp create for subnet in vpc (#1712) fix: cancel delete staticroute when it's used by NatRule (#1733) fix: wrong info when update subnet from dual to ipv4 or ipv6. (#1726) fix: new ovn-ic static route method adapted due to old ovn version (#1718) Mengxin Liu hzma lut777 xujunjie-cover zhangzujian * set release 1.9.7 prepare for release 1.9.7 Get latest vpc data from apiserver instead of cache (#1684) update priority range in htb qos (#1688) add upgrade-ovs script (#1681) Mengxin Liu Wang Bo hzma set release 1.9.6 prepare for release 1.9.6 shim: fix diffs of commits fix: change ovn-ic static route to policy (#1670) fix: Do not Recreate LogicalRouterPort when Vpc recreated (#1570) feat: vpc peering connection Delete pod if subnet of the pod's owner(sts/vm) updated (#1678) security: disable pprof by default (#1672) bgp: consolidate service check and use service const (#1674) fix bgp: sync service cache (#1673) fix libovsdb (#1664) mount modules for auto load ip6tables moudles (#1665) ignore pod not scheduled when reconcile subnet (#1666) fix get security group name by external_ids (#1663) add policy route when add subnet Mengxin Liu Money Liu Wang Bo gugu hzma lut777 wangyd1988 * * set for release 1.9.5 fix: no need routed when use v1.multus-cni.io/default-network (#1652) prepare for release 1.9.5 CI: delete resources in order to avoid a long time waiting for subnet deletions. (#1643) set networkpolicy log default to false (#1633) update policy route when join subnet cidr changed (#1638) ci: update trivy options (#1637) increase initial delay of ovs-ovn liveness probe (#1634) wait ovn-central pods running before delete ovs-ovn pods (#1627) get dbstatus for all ovn-central pod (#1619) fix issues about OVN policy routing use policy route instead of static route (#1618) hzma xujunjie-cover zhangzujian * ci: disable cilium e2e for release prepare for release 1.9.4 update ovs health check, delete connection to ovn sb db (#1588) fix: all cluster pod will be in podadd queue (#1587) fix pod could not be ready (#1562) fix: delete pod panic when delete vm or statefulset. (#1565) fix: keep vm's and statefulset's ips when user specified subnet (#1520) do not gc vm pod lsp when vm still exists (#1558) fix exec cmd in vpc nat gateway (#1556) CNI: do not return route if nic is not eth0 (#1555) exit kube-ovn-controller on stopped leading (#1536) remove name for default drop acl in networkpolicy (#1522) tmp cancel cilium external svc test (#1531) move dumb-init from base images to kube-ovn image hzma lut777 xujunjie-cover * release 1.9.3 fix defunct ovn-nbctl daemon optimize ovs request in cni (#1518) optimize node port-group check (#1514) reduce ovs-ovn restart downtime (#1516) prepare for release 1.9.3 fix: ovs trace flow always ends with controller action (#1508) optimize IPAM initialization ci: skip some checks delete ipam record and static route when gc lsp (#1490) Mengxin Liu hzma zhangzujian release for v1.9.2 fix: wrong vpc-nat-gateway arm image (#1482) add delete ovs pods after restore nb db (#1474) delete monitor noexecute toleration (#1473) add env-check (#1464) append metrics (#1465) masquerade packets from Pods to service IP add kube-ovn-controller switch for EIP and SNAT ignore cni cve add routed check in circulation (#1446) modify init ipam by ip crd only for sts pod (#1448) log: show the reason if get gw node failed (#1443) modify webhook img to independent image (#1442) support keep-vm-ip and live-migrate at the same

(#1439) update alpine to fix CVE-2022-1271 fix adding key to delete Pod queue fix IPAM initialization ignore all link local unicast addresses/routes fix error handling for netlink.AddrDel replace pod name when create ip crd support alloc static ip from any subnet after ns supports multi subnets (#1417) fix provider-networks status recover ips CR on IPAM initialization create ip crd in kube-ovn-controller (#1413) add condition for triggering the deletion of redundant chassises in sbdb (#1411) fix: do not recreate port for terminating pods (#1409) avoid frequent ipset update fix: The underlay physical gateway config by external-gw-addr when use snat&eip (#1400) add reset for kube-ovn-monitor metrics (#1403) check the cidr format whether is correct (#1396) update dockerfile to use v1.9.1 base img append vm deletion check delete repeat para update nodeips for restore cmd in ko plugin fix external egress gateway add missing link scope routes in vpc-nat-gateway increase memory limit of ovn-central fix range loop update script to add restore plugin cmd Mengxin Liu hzma lut777 wangyd1988 xujunjie-cover zhangzujian release update 1.9.1 changelog (#1361) add restore process for ovn nb db optimize kube-ovn-monitor yaml add reset porocess for ovs interface metrics fix SNAT/PR on Pod startup modify ipam v6 release ip problem skip ping gateway for pods during live migration update flag parse in webhook feat: add webhook for subnet update validation keep ip for kubevirt pod add check for pod update process fix ips update append htbqos para in crd yaml fix: replace ecmp dphash with hash by srcip (#1289) fix OVS bridge with bond port in mode 6 fix: continue of deletion for del pod failed when can't found vpc or subnet (#1335) Fix usage of ovn commands resync provider network status periodically Revert "resync provider network status periodically" fix statefulset Pod deletion resync provider network status periodically fix underlay subnet in custom VPC append add cidr and excludeIps annotation for namespace support to add multiple subnets for a namespace feat: update provider network via node annotation fix: only log matched svc with np (#1287) transfer IP/route earlier in OVS startup add metric for ovn nb/sb db status check static route conflict set up tunnel correctly in hybrid mode fix clusterrole in ovn-ha.yaml add gateway check after update subnet fix: validate statefulset pod by name add back centralized subnet active-standby mode Mengxin Liu chestack hzma lut777 xujunjie xujunjie-cover zhangzujian prepare for release 1.9.0 fix: liveMigration with IPv6 update networkpolicy port process Add args to configure port ln-ovn-external update check for delete statefulset pod ignore hostnetwork pod when initipam kubectl-ko: support trace Pods being created add dnsutils for base image Add new arg to configure ns of ExternalGatewayConfig update scripts for 1.8.2 Optimized decision logic add svc cidr in ovs LB for optimization add doc for gateway pod in default vpc optimize log for node port-group fix iptables rules and service e2e add kubectl-ko to docker image fix: invalid syntax error fix pod tolerations modify pod's process of update for use multus cni as default cni fix installation script add log for ecmp route fix: ipv6 traffic still go into ct append check for centralized subnet nat process move chassis judge to the end of node processing change nbctl args 'wait=sb' to 'no-wait' use different ip crd with provider suffix for pod multus nic fix service cidr in dual stack cluster add healthcheck cmd to probe live and ready delete frequently log support running ovn-ic e2e on macOS pinger: fix getting empty PodIPs fix cni deepcopy add cilium e2e filter used qos when delete qos add protocol check when subnet is dual-stack lint: make go-lint happy some fixes compatible with OVN

use multus-cni as default cni to assign ip some fixes perf: jemalloc and ISA optimization fix: check np switch fix: port security fix nat rule When netpol is added to a workload, the workload's POD can be accessed using service when update subnet's execpt ip,we should filter repeat ip update wechat image fix: do not reuse released ip after subnet updated update: update 1.7-1.8 script perf: do not send traffic to ct if not designate to svc fix: add back the leader check fix port_security sync live migration vm port docs: add f5 ces integration docs update Go modules update delete operation for statefulset pod chore: update klog to v2 which embed log rotation fix: add kube-ovn-cni prob timeout append add db compact for nb and sb db deleting all chassises which are not nodes add db compact for nb and sb db add vendor param for fix list LR fix LB: skip service without cluster IP add webhook with cert-manager issued certificate security: update base ubuntu image add pod in default vpc to node port-group fix pinger's compatibility for k8s v1.16 check IPv4 gateway by resolving gateway MAC in underlay subnets add nodeSelector for vpc-nat-gateway pod do not send multicast packets to conntrack Revert "support to set NBGlobal option mcastprivileged" add ip address for lsp fix: no need to set address for ls to lr port add sg acl check when init cleanup command flags replace port-group named address-set with port-group since there's no ip set for lsp when create lsp support to set NBGlobal option mcastprivileged add networkpolicy support for attachment cni add process for pod attachment nic with subnet in default vpc fix security group fix the duplicate call about strings.Split deepcopy fix steps fix: do not nat route traffic fix: Skip MAC address Settings when PCI addresse is unavailable add ovn-ic e2e other CNI can be used as the default network fix: move macvlan binary to host Revert "ci: init kind cluster before build finish" fix ko trace add ovn-ic HA deploy fix node address set name update cni init image chore: update kind k8s to 1.22 and remove pre 1.16 support do not set bridge-nf-call-iptables use logical router policy for accessing node ci: init kind cluster before build finish reduce qos query with ovs-vsctl cmd fix read-only pointer in vlan and provider-network fix: trace in custom vpc fix read-only pointer in vlan and provider-network update docs fix LB in dual stack cluster fix: check allocated annotation in update handler support using logical gateway in underlay subnet docs: optimize cilium integration docs fix: ensure all kube-ovn components deleted before annotate pods fix bug: logical switch ts not ready Fix unpopulated CPU charts Revert "get default subnet" add htbqoses rbac feat: pod can use multiple nic with the same subnet add error detail add check switch for default subnet's gateway get default subnet remove node chassis annotation on cleanup update: add 1.7 to 1.8 update scripts base: add macvlan to help vpc setup fix: delete vpc-nat-gw deployment ko: check ovsdb storage status fix cleanup.sh and uninstall.sh use constant instead a string fix: check and load ip_tables module fix: multus-cni subnet allocation docs: add svg chore: update install integrate Cilium into Kube-OVN fix kubectl-ko diagnose change inspection logic from manually adding lsp to just readding pod queue fix pinger in dual stack cluster add e2e testing for dual stack underlay fix pinger and monitor in underlay networking fix kubectl plugin ko adjust the location of the log ci: push vpc-nat-gateway replace api for get lsp id by name docsrevise

grafana: optimize grafana dashboard In netpol egress rules, except rule should be set to != and should not be == ci: add vpc-nat-gateway build Update OVN to version 21.06 modify kube-ovn as multus-cni problem support to set htb qos priority perf: add fastpath module for 4.x kernel add inspection perf: add stt section and update benchmark feat: optimize log fix: init node with wrong ipamkey and lead conflict fix installation scripts fix getting LSP UUID by name fix StatefulSet down scale fix vpc policy route docs: update roadmap refactor: mute ovn0 ping log and add ping details fix: wrong link for iptables fix IPAM for StatefulSet append externalIds for pod and node when upgrade feature: LoadBalancer for custom VPC feat: support vip fix VPC document fix init ipam fix: gc lb Update prometheus.md feat: support VLAN subnet in VPC ci: push dev image to separate repo fix: kubeclient timeout fix: serialize pod add/delete order perf: increase ovn-nb timeout fix gc lsp statistic for multiple subnet fix: re-check ns annotation to avoid annotations lost perf: do not diagnose external access feature: vpc support policy route reactor: remove ovn ipam options perf: switch's router port's addresses to "router" lint: make staticcheck happy fix e2e testing prepare for next release fix variable referrence fix typos refactor: reuse waitNetworkReady to check ovn0 and slightly improve the installation speed fix nat-outgoing/policy-routing on pod startup feat: suport vm live migration Mengxin Liu MengxinLiu azee chestack feixiang43 huangjunwei hzma lhalbert liqd luoyunhe lut777 pengbinbin1 vseeker wang_yudong wangchl01 zhangzujian * Dockerfile: fix base image version pinger: increase packet send interval (#3259) prepare for 1.8.18 release ci: pin go version to 1.20.5 (#3034) static ip in exclude-ips can be allocated normally when subnet's availableIPs is 0 #3031 prepare for 1.8.17 release add subnet match check when change subnet gatewayType from centralized to distributed (#2891) add static route for active-standby centralized subnet when use old active gateway node (#2699) prepare for next release hzma zhangzujian * ci: add publish action netpol: fix packet drop casued by incorrect address set deletion (#2677) do not set subnet's vlan empty on failure (#2445) ci: fix cilium chaining e2e (#2391) ci: fix ref name check (#2390) ci: skip netpol e2e automatically for push events (#2379) e2e: run specs in parallel (#2375) fix CVE-2022-28948 fix CVE-2022-41723 ci: fix default branch test (#2369) fix github actions workflows (#2363) simplify github actions workflows (#2338) do not remove link local route on ovn0 (#2341) fix encap ip when the tunnel interface has multiple addresses (#2340) enqueue endpoint when handling service add event (#2337) fix getting service backends in dual-stack clusters (#2323) fix github actions workflow An error occurred when netpol was added in double-stack mode (#2160) bump base image fix gosec ci installation (#2295) fix CVE-2022-41721 fix network break on kube-ovn-cni startup (#2272) fix gosec installation add release-1.8/1.9/1.10 to scheduled e2e (#2224) release-1.8: refactor e2e (#2214) prepare for release 1.8.15 fix: ovs gc just for pod if (#2187) fix: change condition to conditions do not add subnet not processed by kube-ovn to vpc (#1735) kind: support to specify api server address/port (#2134) fix: sometimes alloc ipv6 address failed sometimes ipam.GetStaticAddress return NoAvailableAddress fix lint replace klog.Fatalf with klog.ErrorS and klog.FlushAndExit (#2093) fix: del createIPS (#2087) fix ovs bridge not deleted cause by port link not found (#2084) fix: replace replace with add to override existing route (#2061) fix OVN LS/LB gc (#2069) perf: reduce controller init time (#2054) ovs: fix reaching resubmit limit in underlay (#2038) fix pinger namespace

(#2034) update np name with character prefix bump kind and node image versions (#2023) fix ovn nb/sb health check (#2019) fix ovs fdb for the local bridge port (#2014) Mengxin Liu Noah changluyi lut777 tonyleu wangyd1988 zhangzujian * fix: get ecmp nodecheck back (#2016) fix: gateway route should stay still when node is pingable (#2015) do not need to delete pg when update networkpolicy (#1959) do not set bridge-nf-call-iptables add check of write to ovn sb db for ovn-controller (#1989) fix grep matching device in routes (#1986) delete pod after TerminationGracePeriodSeconds (#1984) ovs: fix waiting flows in underlay networking (#1983) use latest base image ovn db: recover automatically on startup if db corruption is detected (#1980) prepare for release 1.8.14 fix CVE-2022-32149 avoid concurrent subnet status update (#1976) modify build error fix metrics name (#1977) add vm pod to ipam by ip when initIPAM (#1974) validate nbctl socket path in start-controller.sh skip CVE-2022-3358 (#1972) use latest base image fix: add default deny acl (#1935) ovs: fix mac learning in environments with hairpin enabled (#1943) Fix registry for ovn-central container in install.sh (#1951) ovs: add fdb update logging (#1941) prepare for release v1.8.13 set ovsdb-server vlog level to avoid warnings caused by ovs-vsctl (#1937) update Go to v1.17 add network partition check in ovn probes feat: Replace command health check with k8s tcpSocket check (#1251) fix CVE-2022-27664 update ns annotation when subnet cidr changed (#1921) Mengxin Liu hzma lut777 runzhliu zhangzujian * * set release 1.8.12 prepare release 1.8.12 fix: gatewaynode might be null (#1896) fix: api rollback fix logrotate issues fix security issues security: conform to gosec G114 (#1860) fix: diskfull may lead to wrong raft status for ovs db (#1635) kubectl-ko: turn off pipefail for ovn leader check (#1891) fix ip6tables link fix duplicate logs for leader election (#1886) Mengxin Liu lut777 zhangzujian * set release 1.8.11 feat: reduce downtime by increasing arp cache timeout feat: reduce wait time by counting the flow num. fix: missing stopovndaemon args delete log severity for drop acl when update networkpolicy (#1862) prepare release for 1.8.11 ovs: fix log file descriptor leak in monitor process (#1855) fix ovs-ovn logging (#1848) fix: multus macvlan ipvlan use kube-ovn ipambut ip not inited in init-ipam (#1843) ko: fix kube-proxy check (#1842) avoid patch interface deletion & recreation during restart ci: switch environment to ubuntu-20.04 (#1838) fix base failure update base image fix base build failure update centralized subnet gateway ready patch operation fix duplicate log for tunnel interface decision (#1823) update version to v1.8.10 (#1819) do not check static route conflict (#1817) update centralize subnet gatewayNode until gw is ready (#1814) initialize IPAM from IP CR with empty PodType for sts Pods (#1812) abort kube-ovn-controller on leader change (#1797) avoid invalid ovn-nbctl daemon socket path (#1799) do not wait dynamic address for pod (#1800) update vpc-nat-gateway base append delete static route for sts pod (#1798) perf: fix memory leak perf: disable mlockall to reduce memory usage set sysctl variables on cni server startup (#1758) fix: add omitempty to subnet spec (#1765) fix CVE-2022-21698 add logrotate for kube-ovn log (#1740) fix: cancel delete staticroute when it's used by NatRule (#1733) fix: wrong info when update subnet from dual to ipv4 or ipv6. (#1726) Get latest vpc data from apiserver instead of cache (#1684) Mengxin Liu Wang Bo bobz965 hzma xujunjie-cover zhangzujian * set release 1.8.9 prepare for release 1.8.9 [PATCH] Delete pod if subnet of the pod's owner(sts/vm) updated (#1678) security: disable pprof by default (#1672) update ovs health check, delete connection to ovn sb

(#1588) Mengxin Liu Wang Bo hzma set release 1.8.8 prepare for release 1.8.8 CI: delete resources in order to avoid a long time waiting for subnet deletions. (#1643) add ovn-ic HA deploy set networkpolicy log default to false hzma lut777 * prepare for release 1.8.7 cni handler: do not wait routed annotation for net1 (#1586) fix adding static route after LSP deletion (#1571) fix duplicate netns parameter (#1580) do not gc vm pod lsp when vm still exists (#1558) fix exec cmd in vpc nat gateway (#1556) CNI: do not return route if nic is not eth0 (#1555) exit kube-ovn-controller on stopped leading (#1536) remove name for default drop acl in networkpolicy (#1522) move dumb-init from base images to kube-ovn image fix defunct ovn-nbctl daemon hzma zhangzujian * release 1.8.6 reduce ovs-ovn restart downtime (#1516) prepare for release 1.8.6 fix: ovs trace flow always ends with controller action (#1508) optimize IPAM initialization Mengxin Liu zhangzujian ci: skip some checks delete ipam record and static route when gc lsp (#1490) CVE-2022-27191 (#1479) add delete ovs pods after restore nb db (#1474) delete monitor noexecute toleration (#1473) add env-check (#1464) append metrics (#1465) add kube-ovn-controller switch for EIP and SNAT add routed check in circulation (#1446) modify init ipam by ip crd only for sts pod (#1448) ignore cni cve log: show the reason if get gw node failed (#1443) update alpine to fix CVE-2022-1271 fix adding key to delete Pod queue fix IPAM initialization ignore all link local unicast addresses/routes fix error handling for netlink.AddrDel replace pod name when create ip crd support alloc static ip from any subnet after ns supports multi subnets fix provider-networks status recover ips CR on IPAM initialization Mengxin Liu hzma zhangzujian release update 1.8.4 changelog (#1414) create ip crd in kube-ovn-controller (#1412) fix: add condition for triggering the deletion of redundant chassises in sbdb (#1411) fix: do not recreate port for terminating pods (#1409) avoid frequent ipset update fix: The underlay physical gateway config by external-gw-addr when use snat&eip (#1400) add reset for kube-ovn-monitor metrics (#1403) check the cidr format whether is correct (#1396) update dockerfile to use v1.8.3 base img append vm deletion check update nodeips for restore cmd in ko plugin fix external egress gateway update ip assigned check add missing link scope routes in vpc-nat-gateway increase memory limit of ovn-central fix range loop hzma lut777 wangyd1988 xujunjie-cover zhangzujian release update 1.8.3 changelog (#1360) add restore process for ovn nb db optimize kube-ovn-monitor yaml add reset porocess for ovs interface metrics deepcopy fix steps fix SNAT/PR on Pod startup add check for pod update process fix ips update fix cni deepcopy fix: replace ecmp dphash with hash by srcip (#1289) keep ip for kubevirt pod fix OVS bridge with bond port in mode 6 fix: continue of deletion for del pod failed when can't found vpc or subnet (#1335) Fix usage of ovn commands ignore cilint resync provider network status periodically Revert "resync provider network status periodically" fix statefulset Pod deletion resync provider network status periodically feat: optimize log optimize log for node port-group append add cidr and excludeIps annotation for namespace support to add multiple subnets for a namespace feat: update provider network via node annotation fix: only log matched svc with np (#1287) transfer IP/route earlier in OVS startup add metric for ovn nb/sb db status check static route conflict set up tunnel correctly in hybrid mode fix clusterrole in

add gateway check after update subnet add back centralized subnet active-standby mode update networkpolicy port process update check for delete statefulset pod chestack hzma lut777 xujunjie-cover zhangzujian release: update 1.8.2 changelog add log for ecmp route fix pod tolerations fix installation script append check for centralized subnet nat process change nbctl args 'wait=sb' to 'no-wait' move chassis judge to the end of node processing use different ip crd with provider suffix for pod multus nic use multus-cni as default cni to assign ip fix: do not reuse released ip after subnet updated delete frequently log pinger: fix getting empty PodIPs add protocol check when subnet is dual-stack filter used qos when delete qos fix: check np switch When netpol is added to a workload, the workload's POD can be accessed using service when update subnet's execpt ip,we should filter repeat ip fix: add back the leader check security: upadate base image update delete operation for statefulset pod chore: update klog to v2 which embed log rotation fix: add kube-ovn-cni prob timeout append add db compact for nb and sb db add vendor param for fix list LR deleting all chassises which are not nodes add db compact for nb and sb db fix pinger's compatibility for k8s v1.16 fix LB: skip service without cluster IP security: update base ubuntu image add pod in default vpc to node port-group add sg acl check when init fix: no need to set address for ls to lr port fix ko trace fix read-only pointer in vlan and provider-network fix read-only pointer in vlan and provider-network fix: trace in custom vpc fix: multus-cni subnet allocation fix LB in dual stack cluster prepare for release 1.8.2 fix: check allocated annotation in update handler fix bug: logical switch ts not ready fix: ensure all kube-ovn components deleted before annotate pods Revert "add check switch for default subnet's gateway" add check switch for default subnet's gateway remove node chassis annotation on cleanup fix: delete vpc-nat-gw deployment fix: serialize pod add/delete order change inspection logic from manually adding lsp to just readding pod queue add inspection fix: check and load ip_tables module fix cleanup.sh and uninstall.sh fix kubectl-ko diagnose fix pinger in dual stack cluster add e2e testing for dual stack underlay fix pinger and monitor in underlay networking fix kubectl plugin ko replace api for get lsp id by name In netpol egress rules, except rule should be set to "!=" and should not be "==" modify kube-ovn as multus-cni problem Mengxin Liu hzma lut777 wang_yudong zhangzujian * release: prepare for 1.8.1 fix: init node with wrong ipamkey and lead conflict fix installation scripts fix getting LSP UUID by name fix StatefulSet down scale refactor: mute ovn0 ping log and add ping details fix: wrong link for iptables fix IPAM for StatefulSet append externalIds for pod and node when upgrade perf: increase ovn-nb timeout fix: re-check ns annotation to avoid annotations lost perf: do not diagnose external access reactor: remove ovn ipam options perf: switch's router port's addresses to "router" fix gc lsp statistic for multiple subnet fix e2e testing fix variable referrence fix nat-outgoing/policy-routing on pod startup Mengxin Liu hzma lut777 zhangzujian fix adding OVN routes in dual stack Kubernetes release: prepare for

add update process and adding label to ls/lsp/lr fix: VLAN CIDR conflict check security: update base image update provider network CRD fix external-vpc perf: use link alias to filter packet security: fix CVE-2021-3538 add print columns for subnet/vpc/vpc-nat-gw crd improve support for dual-stack initialize ipsets on cni server startup delete residual ovs internal ports simplify vlan implement fix: ovn-northd svc flip flop add container run command for runtime containerd fix subnet conflict check for node address feat: read interface in installation from environment update encap ip by node annotation periodic fix ipset on pod creation/deletion add ready status for provider network avoid Pod IP to be the same with node internal IP remove subnet's `spec.underlayGateway` field add support for custom routes Add missing metadata directive in VpcNatGateway example use util.hostNameEnv instead KUBENODENAME chore: change wechat image fix typo perf: add fastpath and tuning guide update node labels and provider network's status.readyNodes when provider network is not initialized successfully in a node fix issues in underlay networking add external vpc switch update versions in docs and yamls update Go to version 1.16 fix IPv6-related issues ci: use stable version fix: bad udp checksum when access nodeport fix port-security, address parameters should be merged into one docs: optimize description ensure provider nic is up fix uninstall.sh some optimizations fix gofmt lint fix multi-nic.md fix dual stack cluster created by kind remove external egress gateway from additionalPrinterColumns fix default bind socket of cni server if the string of ip is empty,program will die if the string of ip is empty,program will die fix underlay networking on node reboot add judge before use the index about cidrBlocks and ips add validation check function docs: add wechat qcode feat: security group delete subnet AvailableIPs and UsingIPs para fix: panic when node has nil annotations append pod/exec resource for vpc nat gw update comment for SetInterfaceBandwidth update qos process fix LoadBalancer in custom VPCs Support Pod annotations control port mirroring fix docs externalOvnRouters is ok with 0 delete attachment ips fix externalids:podnetns add switch for network policy support fix subnet e2e ignore empty strings when counting lbs fix iptables fix issue #944 fix openstackonkubernetes doc bugs add switch for gateway connectivity check fix cleanup.sh security: fix CVE-2021-33910 delete ecmp route when node is deleted fix: if nftables not exists do no exit update wechat contract method delete overlapped var subnet add designative nat ip process for centralized subnet fix ipsets update underlay e2e testing match chassis until timeout fix CRD provider-networks.kubeovn.io fix: set vf mac update qos ingresspolicingburst add field defaultNetworkType in configmap ovn-config keep subnet's vlan empty if not specified delete ecmp route when node is not ready add del learned routes when remove ovnic [kubectl-ko] support trace in underlay networking fix subnet available IPs fix bug for deleting ovn-ic lrp failed add node internal ip into ovn-ic advertise blacklist underlay/vlan network refactoring chore: update ovn to 21.03 security: fix CVE-2021-3121 list ls with label to avoid listing ts failure Update log error delete the process of ip crd delete in cni delete request update networkpolicy process modify func name Additonal to Additional fix uninstall.sh execution in OVS pods perf: enable tx offload again as upstream already fix it label lr, ls and lsp, and add label filter when gc security: add go build security options feat: ko support cluster operations status/kick/backup docs: update docs about vlan/internal-port/kubeconfig add judge before use slices's index update kind to version

adapt to vfio-pci driver fix IP/route transfer on node reboot add master check when a node adding to a cluster and config sb/nb address update installation scripts enable hw-offload do not delete statefulset pod when update pod fix: node route should filter out 'vpc' feat: lb switch docs: show openstack docs and docker image status fix: clean up gateway chassis list for external gw add doc for openstack/kubernetes hybrid deploy configure OVS internal port after dummy interface some fixes in vlan initialization clean up vpc service feat: vpc load balancer fix: lsp may lost when server pressure is high fix: check crds when controller start start evpc ph1 start evpc ph1 ci: retry arm build when failed update ecmp notes add interface name in cni response add nicType for offload 1.Support to specify node nic name 2.Delete extra blank lines ignore update pod nic annotation when is not nil set default UnderlayGateway to true in vlan mode unify logical entity list funcs (#863) ci: remove dpdk ci correct vlan e2e testing fix: remove rollout check adapt internal tcpdump update docker buildx install method fix: remove wait ovn sb fix: ci issues fix: cleanup kube-ovn-monitor resource fix multi-nic.md fix: acl overlay issues ci: split ovn/ovs into base image add judge before use slices's index update version to v1.7 in docs update master version to v1.8.0 Mengxin Liu Ruijian Zhang Tobias feixiang43 hzma lhalbert lut777 pengbinbin pengbinbin1 wang_yudong xieyanker xuhao zhang.zujian zhangzujian * release: prepare for 1.7.3 fix: disable periodically gc fix installation scripts fix StatefulSet down scale fix: init node with wrong ipamkey and lead conflict refactor: mute ovn0 ping log and add ping details fix: wrong alias for iptables fix: northd probe issues fix IPAM for StatefulSet append externalIds for pod and node when upgrade security: update base image fix gc lsp statistic for multiple subnet fix: kubeclient timeout fix: serialize pod add/delete order refactor: reuse waitNetworkReady to check ovn0 and slightly improve the installation speed perf: increase ovn-nb timeout fix: re-check ns annotation to avoid annotations lost perf: do not diagnose external access reactor: remove ovn ipam options perf: switch's router port's addresses to "router" fix e2e testing fix variable referrence fix nat-outgoing/policy-routing on pod startup Mengxin Liu hzma lut777 zhangzujian fix: VLAN CIDR conflict check perf: use link alias to filter packet security: fix CVE-2021-3538 prepare for release v1.7.2 initialize ipsets on cni server startup delete residual ovs internal ports fix: ovn-northd svc flip flop fix subnet conflict check for node address update comment for SetInterfaceBandwidth update encap ip by node annotation periodic delete subnet AvailableIPs and UsingIPs para fix ipset on pod creation/deletion add ready status for provider network avoid Pod IP to be the same with node internal IP update node labels and provider network's status.readyNodes when provider network is not initialized successfully in a node fix issues in underlay networking fix IPv6-related issues ci: use stable version fix: bad udp checksum when access nodeport ensure provider nic is up fix uninstall.sh fix gofmt lint if the string of ip is empty,program will die fix dual stack cluster created by kind fix default bind socket of cni server update kind to v0.11.1 fix underlay networking on node reboot append pod/exec resource for vpc nat gw fix: panic when node has nil annotations update qos process delete attachment ips fix externalids:podnetns fix subnet e2e ignore empty strings when counting lbs fix iptables fix image version fix cleanup.sh security: fix CVE-2021-33910 delete ecmp route when node is deleted fix: if nftables not exists do no exit delete overlapped var subnet match chassis until timeout update qos ingresspolicingburst fix ipsets update underlay e2e testing fix CRD provider-networks.kubeovn.io Mengxin Liu Ruijian Zhang feixiang43 hzma lut777 zhangzujian * ready for release

add field defaultNetworkType in configmap ovn-config keep subnet's vlan empty if not specified update ecmp notes delete ecmp route when node is not ready delete the process of ip crd delete in cni delete request fix subnet available IPs [kubectl-ko] support trace in underlay networking underlay/vlan network refactoring adapt internal tcpdump fix bug for deleting ovn-ic lrp failed add node internal ip into ovn-ic advertise blacklist security: fix CVE-2021-3121 feat: ko support cluster operations status/kick/backup fix uninstall.sh execution in OVS pods perf: enable tx offload again as upstream already fix it security: add go build security options fix IP/route transfer on node reboot add master check when a node adding to a cluster and config sb/nb address do not delete statefulset pod when update pod fix: node route should filter out 'vpc' some fixes in vlan initialization fix: clean up gateway chassis list for external gw ci: remove dpdk ci correct vlan e2e testing configure OVS internal port after dummy interface fix: lsp may lost when server pressure is high 1.Support to specify node nic name 2.Delete extra blank lines ignore update pod nic annotation when is not nil set default UnderlayGateway to true in vlan mode fix: remove rollout check fix: remove wait ovn sb fix: cleanup kube-ovn-monitor resource fix: acl overlay issues update version to v1.7 in docs Mengxin Liu Ruijian Zhang hzma lut777 xuhao zhangzujian * prepare for release v1.7.0 diagnose: check sa related resource fix: do not nat route traffic fix: release ip addresses even if pods not found fix typo docs: add description of custom kubeconfig fix: add address_set to avoid error message optimize Makefile update vlan document add label to avoid deleting other delete unused log add ovs internal-port for pod network interface support underlay mode with single nic support underlay mode with single nic fix: add node to pod allow acl traffic rate for multus nic add ovs internal-port for pod network interface Add maintainers add e2e tests for external egress gateway fix e2e testing on macOS ci: fix lint and scan error fix: check if provider network exists update subnet document rename ExternalGateway to ExternalEgressGateway fix installation doc fix: forward policy to accept ci: fix lint error traffic rate for multus nic refactor: optimize service.go and subnet.go Check and Fetch all ValidatePodNetwork errors add judge about nic address implement new feature: external gateway start_ic should run regardless of ts port add judge before use index specify ovs ops on diff nodes fix mss rule Get node info from listerv1.NodeLister(index) Clean up the wrong log refactor: optimize subnet.go Optimise the redundancy code Handler the parse config error before used ci: remove 3-master e2e Remove the unnecessary rm command Use localtime when the kube-ovn installed Fix the different time from container and host add issue template add bgp doc support afisafis feat: support graceful restart fix: del might panic if duplicate delete fix: lr-route for eip using nic-ip, and not external gateway addr. feat: support announce service ip Fix some minor nits for docs add bpg options in bgp.md add Opstk&K8s ic doc add holdtime function fix: do not re-generate ts port fix: ignore root path doc ci fix: do not gc learned routes feat: add vxlan in README.md fix: getleaderip always return fist node ip fix: remove tty error notification fix ovn nb reconnect add docs for 'multus ovn network' add vpc nat gateway docs fix: static route for default multus network feat: support vxlan tunnel append delete ovn-monitor in ovn.yaml split ovn-central and ovn-monitor Fix mount the systemid path handle update deployment vpc-nat-gw refactor: remove function genNatGwDeployment's return error Update crd vpc-nat-gateways.kubeovn.io for pre-1.16 fix incorrect method for gateway node judgement Fix the 'multus how to use' link fix multi nic fix duplicate imports fix: compatible with JSON format fix: leader may change during startup, use cluster connection to set

fix SNAT on pod startup fix development guide fix gofmt fix: configure nic failed when ifname empty fix: port does not support vlan tag update fix build dev image support hybrid mode for geneve and vlan remove extra space fix: compatible with no norhtd svc fix chassis check for node optimization for ovn/ovs status metric fix: release norhtd lock when power off add single node e2e fix get pod attachment net support ovn defautl attach net add network-attachment-definitions clusterRole feat: multus ovn nic update node ip when upgrade to dualstack add details for prerequisite Add Ecmp Static Route for centralized gateway fix: disable offload if geneve port exists disable offload for genevsys6081 refactor: optimize ovn command when error exists add net-attach-def ClusterRole add lsp with external_id feat: multus ovn nic fix: check ovn0 status livenessprobe fail if ovn nb/ovn sb not running fix: disable checksum offload for ovn0 to prevent kernel issue ignore ip6tabels check for v4 hostIP improve the code style of [import group ordering] fix wrong sequence update arm64 build fix: restart ovn-controller to force update flows fix: disable checksum validation Use public network effective image update usingips check when update finalizer for subnet fix dependency Update vendor. trim space the port_binding's output refactor: remove unnecessary config logic update maintainers docs: deprecated webhook fix: add missing ovn-ic binary chore: change action name chore update artworks fix: delete chassis_private when delete node Add 'kubectl ko trace' command's default namespace Add 'kubectl ko trace' command's default namespace perf: reclaim heap memory after compaction. remove the old script docs: add CNCF description fix: gc not exist node error perf: use new option to decrease ovn-sb size fix: return err docs: add faq section add vpc nat gateway Dockerfile feat: vpc nat gateway add node address allocate check when init update upgrade for ovn-default and join subnet fix: lint error fix: add missing ovn-ic-db schema update subnet ip num calculate fix: masq traffic to ovn0 from other nodes refactor: reduce duplicated GetNodeInternalIP function chore: update go version chore: move build dependency from alauda to kubeovn feat: support set default gateway in install script docs: fix typos Update install-pre-1.16.sh Update install.sh go import repo change to kubeovn feat: vpc nat gateway Resolving typo. filter repeat exclude ips modify ip count for dual docs: add ARCHITECTURE.MD refactor: reduce duplicated function fix: add dpdk pod name Update cleanup.sh Update cleanup.sh test: add service e2e modify test problem fix: kube-proxy check ovn-central: set default db addr same with leader node to fix nb and sb error 'bind: Address already in use' fix: reset ovn0 addr tests: add e2e for ofctl/dpctl/appctl ci: replace image docs: clarify dpdk usage scenario ci: update kind version and set timeout Update install-pre-1.16.sh Update install.sh refactor: remove duplicated call Update kubectl-ko Fix missing square brackets in curl ipv6 Modify the health check for kube-proxy port, compatible with ipv6 Update controller.go Fix: remove IsNotFound when get configmap external gateway Fix: check kube-proxy's 10256 port healthz fix: ip6tables check error Add MAINTAINERS file add vpcs && vpcs/status clusterRole Update install-pre-1.16.sh delete connect to ovsdb for ovn-monitor cni-bin-dir,cni-conf-dir configurable Fix https://github.com/alauda/kube-ovn/issues/655 Update install.sh Error: unknown command "ko" for "kubectl" Fix: wrong split in FindLoadbalancer function vlan nic support regex fix underlay gateway flood logs fix: check required module before start docs: add underlay docs chore: update ovn to 20.12 and ovs to

prepare for next release fix: make sure northd leader change fix: make sure ovn-central is updated one by one fix: restart when init ping failed fix: increase raft timer to avoid leader flap pass golangci-lint add golangci-lint to github actions fix pod terminating not recycle ip when controller not ready fix: add new iptable cleanup commands modify static gw changed problem Fix wait pod network ready take long time fix: when address is empty, skip route/nat deletion fix: update ipam cidr when subnet changed modify test problem for dual-stack upgrade Amye Scavarda Perrin JinLin Fu Mengxin Liu Wan Junjie Yan Wei Yan Zhu caoyingjun chestack cmj danieldin95 halfcrazy hzma luoyunhe1 lut777 pengbinbin1 sayicui wangyudong withlin xieyanker zhangzujian * prepare release for v1.6.3 fix: do not nat route traffic fix: release ip addresses even if pods not found security: fix crypto CVE fix: add address_set to avoid error message fix: add node to pod allow acl Handler the parse config error before used fix: del might panic if duplicate delete fix: do not re-generate ts port fix: getleaderip always return fist node ip fix: do not gc learned routes fix: remove tty error notification fix ovn nb reconnect perf: reclaim heap memory after compaction. fix: leader may change during startup, use cluster connection to set options. fix SNAT on pod startup Mengxin Liu Yan Zhu caoyingjun chestack zhangzujian * release 1.6.2 fix: configure nic failed when ifname empty remove extra space fix chassis check for node fix: compatible with no norhtd svc fix: release norhtd lock when power off fix: disable offload if geneve port exists disable offload for genevsys6081 rebuild to fix openssl cve fix: check ovn0 status ignore ip6tabels check for v4 hostIP livenessprobe fail if ovn nb/ovn sb not running fix: disable checksum offload for ovn0 to prevent kernel issue add node address allocate check when init update arm64 build fix: restart ovn-controller to force update flows fix: disable checksum validation update usingips check when update finalizer for subnet Mengxin Liu danieldin95 halfcrazy hzma lut777 fix: add missing ovn-ic binary release for 1.6.1 fix: delete chassis_private when delete node chore: update ovn to 20.12 ovs to 2.15 refactor: reduce duplicated function fix: masq traffic to ovn0 from other nodes ovn-central: set default db addr same with leader node to fix nb and sb error 'bind: Address already in use' fix: reset ovn0 addr Fix: wrong split in FindLoadbalancer function fix underlay gateway flood logs fix: check required module before start fix: make sure northd leader change fix: restart when init ping failed fix pod terminating not recycle ip when controller not ready fix: add new iptable cleanup commands Fix wait pod network ready take long time fix: when address is empty, skip route/nat deletion fix: update ipam cidr when subnet changed prepare for 1.6.1 move build dependency from alauda to kubeovn update upgrade for ovn-default and join subnet update subnet ip num calculate fix: ip6tables check error delete unused import packet filter repeat exclude ips modify ip count for dual modify test problem add vpcs && vpcs/status clusterRole delete connect to ovsdb for ovn-monitor modify static gw changed problem modify test problem for dual-stack upgrade Mengxin Liu Wan Junjie Yan Zhu cmj hzma wangyudong xieyanker release: 1.6.0 docs: add docs for vpc fix typo ci: update go version to 1.15 Fix: replace the command to run the script via 'sh' with 'bash' Fix the default mtu parameter's describe modify network policy process upgrade for subnet from single protocol to dual-stack add network policy adapt for dual-stack feat: update ovn to 20.09 docs: prepare docs for

release perf: add pprof to pinger doc for dual-stack Update the container nic name use the CNI_IFNAME parameter which passed by kubelet ci: enable docker experimental feature ci: build multi arch image <fix>(np) fix mulit np rule and gateway bug fix start-db.sh echo message fix: iface check error fix: add missing ping due to deb build fix: find iface by full match first then regex match fix: livenessProb/readinessProb might conflict when run logrotate at same time modify subnet and ip crds modify service vip parse error update vendor update client-go fix: np with multiple rules modify loop error for get metrics diagnose: add more diagnose info ci: trigger action when yamls change fix: ha e2e failed fix: allow traffic to gateway fix: cni-server default encap ip use right interface ip feat: change default build image to ubuntu add build for dualstack feat: distributed eip Add CNI modify for dualstack Debian: Add debian docker image support Add adaption for dualstack, part of daemon process. chore: reduce binary size modify build problem Append ip monitor to document license: fix felix dir feat: support advertise subnet route Add IP Num Alert Add adaption for dualstack, part of controller process. convert ip to string add pod static ip validate chore: add COC and roadmap fix: move felix to self repo to remove bird license Add license scan report and status fix: default network release for 1.5.2 fix: ovn-ic support ssl fix: nat rules can be modified fix: remove svc cidr routes ci: specify ubuntu version to make github action happy fix: specify exec container to mute warning message feat: remove cluster ip dependency for ovn/ovs components fix: add resources limits to avoid eviction fix: vpc static route manage fix: validate vpc subnet Fix external-address config description Fix the problem of confusion between old and new versions of crd fix: ovn-central check if it exits in NODE_IPS fix: check ipv6 requirement before start feat: add ovs/ovn log rotation add node ping total count metric diagnose: add ovs-vsctl show to diagnose results fix: nat rules fix: masq other nodes to local pod to avoid nodrport triangle traffic Update install.sh to allow dpdk limits configuration (#546) format test: e2e uses IPVS cluster by default chore: update go version to 1.15 fix: tolerate all taints feature: add vpc static route fix: cleanup script error docs: modify eip config description security: remove sqlite to mute cve warning test: add e2e for kubectl-ko feat: pinger can return exit code when failed fix: nat traffic that from host to svc docs: new feat for disable-ic, regex iface and pod bind subnet sync the default subnet of ns by vpc's status fix: devault vpc lb/dns fix: shutdown vpc workqueue fix: subnet CIDRConflict fix: subnet bind to ns feature: add vpc crd Release and gc the resources in vpc fix: gc logic router gc and clean vpc Remove the VPC while removing the default subnet feature: support custom vpc chore: refactor log feat: iface support regexp feat: support disable interconnection for specific subnet modify review problems docs: v1.5.1 changelog perf: accelerate ic and ex gw update fix: missing version date fix: check multicast and loopback subnet monitor: refactor grafana dashboard docs: do not allow install to namespace other than kube-system update review problems for ovn_monitor monitor: add more dashboard chore: add vendor Updated Dockerfile.dpdk1911 to use Centos8 and

fix: CodeQL scan warning fix: ipt wrong order and add cluster route opt: only allow specifies default subnet chore: reduce image size feature: Support for namespace binding multiple subnets docs: fix multi nic subnet options docs: add pinger/controller/cni metrics fix: add default ssl var for compatibility Add monitor doc fix: ipv6 network format when update subnet fix: ipv6 len mismatch chore: add version info metrics: add ovs client latency metrics Add OVN/OVS Monitor docs: performance test method fix: wrong port porto for udp docs: add descriptions of local files ci: add github code scan fix: do not adv join cidr when enable ovn-ic perf: remove default acl rules prepare for next release fix: use internal IP when node connect pod ci: change to docker buildx action fix: delete pod when marked with deletionTimestamp fix: remove not alive pod in pg Emma Kenny Mengxin Liu MengxinLiu Wan Junjie emmakenny feixiang fossabot hzma luoyunhe1 wiwen xieyanker * release for 1.5.2 fix: nat rules can be modified fix: add resources limits to avoid eviction ci: specify ubuntu version to make github action happy fix: remove svc cidr routes Fix the problem of confusion between old and new versions of crd Fix external-address config description fix: ovn-central check if it exits in NODE_IPS fix: check ipv6 requirement before start feat: add ovs/ovn log rotation diagnose: add ovs-vsctl show to diagnose results add node ping total count metric fix: tolerate all taints chore: update go version to 1.15 fix: masq other nodes to local pod to avoid nodrport triangle traffic Update install.sh to allow dpdk limits configuration (#546) prepare for 1.5.2 fix: cleanup script error security: remove sqlite to mute cve warning chore: refactor log fix: nat traffic that from host to svc feat: iface support regexp Mengxin Liu emmakenny hzma xieyanker release 1.5.1 opt: only allow specifies default subnet feature: Support for namespace binding multiple subnets perf: accelerate ic and ex gw update fix: check multicast and loopback subnet fix: CodeQL scan warning fix: ipt wrong order and add cluster route fix: add default ssl var for compatibility fix: broken rpm link fix: ipv6 network format when update subnet fix: ipv6 len mismatch fix: wrong port porto for udp fix: do not adv join cidr when enable ovn-ic perf: remove default acl rules fix: use internal IP when node connect pod ci: change to docker buildx action fix: delete pod when marked with deletionTimestamp fix: remove not alive pod in pg Mengxin Liu * release: prepare for release 1.5.0 perf: use podLister to optimize k8s calls chore: enable ssl to default ci tests security: change ovsdb file access to 600 docs: improve hw-offload feat: support db ssl communication diagnose: show nb/sb/node info fix: pinger diagnose should use cmd args fix: ipv6 get portmap failed again fix: ipv6 get portmap failed fix: delay mv cni conf to when cniserver is ready chore: update kind and kube-ovn-cni updateStrategy monitor: add cni grafana dashboard monitor: add more kube-ovn-cni metrics feat: update pinger dashboard fix: issues with vlan underlay gateway feat: set more metadata to interface external_ids feat: grace stop ovn-controller refactor: fix bridge-mappings and refactor vlan code fix: allow mirror config update fix: cleanup v6 iptables and ipset docs: add gateway docs and optimize others feat: integrate ovn sfc feat: support pod snat prepare for next release fix: ovn-ic-db restart failed fix: stop ovn-ic when disabled fix: use nodeName as chassis hostname Mengxin Liu prepare for 1.4 release fix: do not gc learned routes chore: add psp perf: apply udp improvement chore: sync pre-1.16 install.sh ci: use go 1.15 fix: add prob timeout to wait script finish resolve review problem chore: suppress verbose logs fix: do not gc ic logical_switch fix: only gc VIF type logicalswitchport docs: update docs chore: add back lflow reduction optimization chore: update ovs to

fix: remove duplicated gcLogicalSwitch fix: modify src-ip route priority fix: missing session lb to logical switch feat: ovn-ic integration fix:resolve gosec check problem feat: do not perform masq on external traffic chore: fix patch failure fix: subnet acl might conflict if allowSubnets and subnet cidr cover each other feat: acl log drop packets chore: remove juju log dependency feat: gw switch from overlay to underlay chore: prepare for 1.4 release fix: prevent update failed logs fix: ko use external-ids to find related nic fix: forward accept rules Mengxin Liu hzma chore: add build date release: update 1.3.0 docs fix: call appendMssRule function to resolved mss according problem dpdk: add kmod, pdump and proc-info tools fix: ci image tags chore: optimize dpdk build docs: add hw-offload docs and resolve some issues fix: if sriov device, do not delete the host nic fix: use keymutex to serialize pod add/delete operation feat: assign a pod as the gw ci: add arm build to normal ci process ci: add unfixed cve ci: arm64 build accelerate chore: add logs to sriov interface ci: add ipv6 install e2e feat: recycle lsp at runtime fix: qos error fix: variable error ci: modify cache usage ci: save ci time chore: use j2 to render different kind.yaml fix: set qlen for ovn0 prepare for 1.3 release chore: update build.sh fix: log error chore: check ovn-sb connectivity from ovn-ovs probe fix: available ips calculation issues perf: add hw offload docs: add gateway qos doc ci: remove master taint chore: update cni dependencies feat: session service Revert "perf: use policy-route to replace src-ip route" Revert "fix: ipv6 policy route" Revert "fix: reset address_set when delete subnet" fix: reset address_set when delete subnet test: statefulset without ippool match apps/ statefulset fix: ipv6 policy route feat: support gw qos perf: use policy-route to replace src-ip route Solve the problem of non-standard statefulset creation mode fix: arm64 build missing env action: use commit as image tag Add libatomic to docker image chore: save disk space when building chore: change crd form v1beta1 to v1 kubectl-ko: add ovs-tracing info pinger: add metrics to resolve external address chore: update ovn to 20.06 update changelog fix some version in docs fix: rename variable fix: minor fix feat: use never used address first to reduce conflict ci: use tmpfs to accelerate e2e fix: create/delete order might lead ip conflict ci: do not push image when pr clean up all white noise security: update yum repo fix node's annottaions overwrited incorrectly Fix typo in multi-nic.md Userspace-CNI updates in dpdk.md Remove empty lines from DPDK Dockerfile security: update loopback to fix CVE Make OVS-DPDK start script more robust Reduce DPDK image size fix: add back privilege for ipv6 Config support for OVS-DPDK security: add trivy scan and fix image CVEs docs: modify arm build docs: update development refactor: use ovs.Exec replace raw command chore: add gosec to audit code security prepare for next release fix: arm build fix: change version in install.sh Gary Haocheng Liu Mengxin Liu MengxinLiu Patryk Strusiewicz-Surmacki Xiang Dai ckji laik linruichao release 1.2.1 fix: create/delete order might lead ip conflict fix node's annottaions overwrited incorrectly security: update loopback to fix CVE fix: add back privilege for ipv6 fix: arm build fix: change version in install.sh Mengxin Liu MengxinLiu ckji chore: prepare for release 1.2 chore: prepare for release

DPDK doc update and small image reduction Add OVS-DPDK support, for issue 104 fix: pod get deleted between configure nb and patch pod fix: native vlan and delete subnet issues fix: trigger github action when dist dir change fix: update ovn patch chore: improve log fix: gc lsp for pod that not alive feat: support underlay without vlan encap chore: optimize kube-ovn-cni log fix: gc node lsp chore: remove vagrant fix: dst route policy might be empty feat: in vlan mode if physical gateway exists, no need to create a virtual one perf: add amd64 compile flags back fix: init ipam before gc, other wise routes will be deleted fix: patch ovn to lower src-ip route priority to work with ovn-ic fix: return early if allocation is not ready chore: remove networks crd perf: remove more stale lflow ci: run ut and e2e in github action fix: check svc and endpoint protocol perf: reduce lflow count fix: when podName or namespace contains dot, lsp cannot be deleted correctly fix: wrong subnet status feat: change pod route when update gateway type feat: refactor subnet and allow cidr change fix: use kubectl to avoid tls handshake error chore: reduce logs feat: only show error log of kube-ovn-controller fix: map concurrent panic fix: ipv6 related issues fix: validate if subnet cidr conflicts with svc ip fix: validate if node address conflict with subnet cidr feat: github action fix: wait node annotations ready before handle pods fix: check ovn-nbctl socket in new dir fix: error log found in scale test fix: concurrent panic feat: use bgp to announce pod ip release 1.1.1 fix: labels might be nil fix: ping output format monitor: make graph more sensitive to changes docs: update vlan docs docs: update docs feat: improve install/uninstall refactor: refactor cni-server refactor: controller refactor feat: modify install.sh for vlan type network feat(vlan): vlan network type feat(vlan): vlan network type fix: yaml indent and ovn central dir docs: chinese wechat info fix: fork go-ping and apply patches chore: update kind node to 1.18 and ginkgo docs: add arm build steps fix: mount etc/origin/ovn to ovs-ovn add support for multi-arch build docs: change the cidr to avoid misunderstanding feat: diagnose check if dns/kubernetes svc exist OVS local interface table macinuse row is lower case, but pod annotation store mac in Upper case. prepare for 1.2 fix: separate log for no address and wrong address docs: format docs Gary Mengxin Liu MengxinLiu Yan Zhu fangtian linruichao release 1.1.1 fix: labels might be nil monitor: make graph more sensitive to changes fix: ping output format fix: yaml indent and ovn central dir fix: fork go-ping and apply patches fix: mount etc/origin/ovn to ovs-ovn fix: use legacy iptables MengxinLiu release 1.1.0 feat: use buildx to reduce image size test: check host route when add/del a subnet [DO NOT REVIEW] vendor update: introduce klogr and do some tidy [webhook] init logger for controller-runtime test: add node test fix: acl and qos issues feat: expose iface in install.sh fix: remove auto checksums perf: offload udp checksum if possible release v1.0.1 perf: add x86 optimization CFLAGS chore: add scripts to build ovs fix: lost route when subnet add and is not ready fix: ip prefix might be empty chore: reduce image size chore: modify nodeSelector label to support k8s 1.17 fix: use ovn-appctl to do recompute docs: multi nic feat: ip cr support multi-nic fix: update in svc 1.1.1.1 may del svc

feat: add cni side logical to support ipam for multi-nic feat: add basic allocation function for multus-cni fix: only delete pod that restart policy is Always perf: only enqueue updatePod when needed fix: add iptables to accept container traffic feat: check kube-proxy and coredns in diagnose feat: add label param in install script perf: recycle ip and lsp for pod that in failed or succeeded phase fix: add inactivity_probe back feat: check if crds exist in diagnose fix: gc static routes fix: still delete lsp if pod not in ipam fix: delete chassis from sb when delete node fix: missing label selector feat: add one script installer fix: cleanup in offline environment feat: diagnose check ds/deployment status refactor: the ipam now has lock itself no need for ippool queue fix: if pod is evicted, recycle address fix: use uuid to fetch vip refactor ipam release 1.0.0 refactor pod controller merge images into one fix:enablebash alias option in Dockerfile CMD scripts webhook: use global variables to avoid repeated map constructing remove useless fields in webhook.yaml remove leader-election for webhook manager feat: update to 20.03.0 ovn Bruce Ma MengxinLiu Your Name release v1.0.1 fix: lost route when subnet add and is not ready fix: ip prefix might be empty fix: update in svc 1.1.1.1 may del svc 1.1.1.10 fix: add inactivity_probe back fix: use uuid to fetch vip MengxinLiu release 1.0.0 prepare for 1.0 fix: add back missing lsp gc fix: delete lb if it has no backend metrics: expose cni operation metrics refactor: refactor server.go fix: disable ovn-nb inactivity_probe fix: wait for container network ready before cni return refactor: refactor controller.go ovn: pick upstream performance patch docs: add the development guide and fix the lint docs: add companies using kube-ovn section docs: add community information fix: alleviate ping lost refactor: refactor ovn-nbctl.go docs: modify the readme fix: pinger percentage error fix: add kube-ovn types to default scheme refactor: cniserver docs: update docs fix: add a periodically recompute to ovn-controller to avoid inconsistency fix: add timeout to pinger access ovs/ovn fix: when subnet cidr conflict requeue the subnet fix: add runGateway to wait.Until fix: restart nbctl-daemon if not response feat: display controller log in kubectl-ko diagnose refactor: separate normal check and ovn specific check fix: do not return not found err fix: move components to kube-system ns and add priorityClass feat: cniserver check allocated annotation before configure pod network fix: set ovn-openflow-probe-interval pinger: add port binds check between local ovs and ovn-sb fix: if cidr block not ends with zero, reformat it fix: resync iptables update version pinger: add timeout for dns resolve e2e: add basic framework and tests for e2e Bruce Ma Mengxin Liu MengxinLiu withlin release 0.10.2 fix: add a periodically recompute to ovn-controller to avoid inconsistency fix: when subnet cidr conflict requeue the subnet fix: add runGateway to wait.Until fix: restart nbctl-daemon if not response Mengxin Liu release: v0.10.1 fix: do not return not found err fix: set ovn-openflow-probe-interval pinger: add port binds check between local ovs and ovn-sb fix: if cidr block not ends with zero, reformat it fix: resync iptables Mengxin Liu docs: update changelog fix: address in ep might be empty fix: cniserver wait ovs ready fix: wrong deletion in gc lb and portgroup ovn: add memory patch to slow down memory increase fix: wait default and node logical switch ready fix: podSelector in networkpolicy should only consider pods in the same ns fix: do not add unallocated pod to port-group release 0.10.0 ovn: pick up commit from upstream feat: pinger support check an address out of cluster. chore: double quote shell variables fix: cluster mode db will generate lots listen error log fix: gc logicalswitchport form listing pods and nodes fix: some init and cleanup bugs fix: ovn-cluster mode feat: exclude_ips can be changed dynamically update ovn to

feat: use label to select leader to avoid pod status misleading fix: ip conflict when use ippool docs: add v0.9.1 changelog fix: block subnet deletion when there any ip in use plugin: kubectl plugin now expose ovs-vsctl to each node fix: nbctl need timeout to avoid hang infinitely perf: as lr-route-add with --may-exist will replace exist route, no need for another delete perf: when controller restart skip pod already create lsp fix: when delete node recycle related ip/route resource fix typo in start-ovs.sh perf: skip evicted pod when enqueueAddPod and enqueueUpdatePod fix: use ep.subset.port.name to infer target port number fix: if no available address delete pod might failed related to #155 kind: support reload kube-ovn component in kind cluster perf: filter pod in informer list-watch and disable resync fix: index out of range err when create lsp prepare for next release kind: support to install kube-ovn in kind fix: mount /var/run/netns that kind will use it to store network ns files Mengxin Liu qsyqian release v0.9.1 fix: block subnet deletion when there any ip in use fix: nbctl need timeout to avoid hang infinitely fix: when delete node recycle related ip/route resource fix typo in start-ovs.sh fix: use ep.subset.port.name to infer target port number fix image tag fix: mount /var/run/netns that kind will use it to store network ns files fix: index out of range err when create lsp Mengxin Liu qsyqian release: v0.9.0 feat: when use nodelocaldns do not nat the address docs: add description about relation of cidr and static ip allocation Check the short name of kubernetes services which is independant of the cluster domain name. fix: some grafana modification fix: add missing cap chore: update ovn and other minor fix fix re-annotate namespaces when subnet deleted fix: add ingresspolicingburst to accurate limit ingress bandwidth fix: network unreachable when add egress qos for pod fix: err when add egress qos fix: remove privilege=true from long run container perf: optimize pod add fix: add keepalive to ovn-controller feat: add controller metrics If pod have not a status.PodIP skip add/del static route fix: ippool pod static route might lost during leader election fix: static route might lost during leader election feat: add grafana config and modify metrics. fix: only keep the last iface-id fix: add missing gc fix: gc resource when start controller fix: watch will break if timeout is set feat: pinger add apiserver check metrics fix: avoid conflict when init Mengxin Liu QIANSHUANGYANG [] Sbastien BERNARD Yan Zhu release v0.8.0 fix: loss might be negative number feat: pinger prometheus support feat: support pinger chore: update ovs/ovn feat: gateway ha chore: remove ovs-ipsec and update go to 1.13 feat: add kubectl plugin docs: add comparison fix: pod should be accessed from node when acl applied enable portmap by default to support hostport feat: add port security to pod port feat: add node switch allocated ip cr prepare for next release Mengxin Liu MengxinLiu Yan Zhu release: bump v0.7.0 fix: add default excludeIps and check kern version fix: deal with ipv6 connection str fix missing condition when subnet is private add subnet status fix: acl related issues Revert "add subnet status field" add missing subnets/status operation permission Update cleanup.sh feat: add exclude_ips annotation to namespace fix: use pg-del to remove pg and acl, check if ports is empty before set pg add subnet status feat: add subnet annotation to ns and automatically unbind ns from

docs: add cn docs link feat: add default values to subnet write back subnet name to ip label chore: enable mirror in yaml and modify docs fix: duplicate import in network_policy.go fix: improve cni-conf name priority fix: wait subnet ready before start worker. fix: check ls exists before handle it docs: add more installation tools. docs: add support os and notes. Update subnet.md feat: add ip info to ip crd feat: update logo feat: add logo feat: reserve vport for statefulset pod docs: add crd installation fix: modify default header length fix: do not create exist logical switch chore: prepare for next release MengxinLiu Yan Zhu ftiannew halfcrazy shuangyang.qian docs: add crd/ipv6 docs and bump version 0.6.0 fix build error feat: support ipv6-only mode add webhook docs add admission webhook for static ip docs: add support platform version feat: use subnet crd to manage logical switch Use k8s hostname, fix #60 fix: remove dependency on cluster-admin chore: use go mod to replace dep docs: update mirror feature to readme feat: support traffic mirror prepare for next release MengxinLiu Yan Zhu chore: bump v0.5.0 fix: wrong mtu feat: support user define iface and mtu fix: remove mask field from ip annotation feat: auto assign gw for controller config and expose more cmd args feat: add pprof and use it as probe feat: set kernel args when start cniserver feat: support network policy prepare for next release MengxinLiu bump version to v0.4.1 fix: manual static ip allocation and automatic allocation should use different ip validation Fix json: cannot unmarshal string into Go value of type request.PodResponse https://github.com/alauda/kube-ovn/issues/33 fix: use ovsdb-client to get leader info fix: use default-gw as default-exclude-ips and expose args to docs to cleanup all created resources, not only kube-ovn namespace. prepare for next release MengxinLiu Yan Zhu fanbin feat: bump version to 0.4.0 feat: support expose pod ip to external network fix: check conflict subnet cidr fix: start informer when controller is leader feat: validate namespace/pod annotations fix: wait node-gw info ready fix: use ovn/ovs-ctl to health check feat: remove finalizer dependency improve svc performance fix: reuse node ip and mac annotation Add ha for ovn dbs and simplify makefile feat: merge ovn-nbctl request feat: separate ip pool pod and add parallelism to workers Mute logrus log for ipset Dont need to change the vendored code. Fix klog cant use V module The side affect of this commit is glog's V module not work. feat: use ovn macam to allocate mac for static ip pod feat: update ovn to 2.11.1 Add vagrantfile fix: use tag version yaml url chore: fix go-report golint issues ha for kube-ovn-controller cleanup unused code docs: add network topology chore: Minor updates to gateway.md chore: Gateway documentation touch-ups chore: QoS documentation touch-ups chore: Subnet Isolation documentation touch-ups chore: Static IP documentation touch-up chore: Subnet documentation touch-ups chore: Installation Guide touch-ups chore: README touch-up. Kai Chen MengxinLiu Yan Zhu docs: bump version fix: acl rule error fix: init node gw before run controller fix: external dns issues feat: use daemon ovn-nbctl to improve performance and cleanup unused dns code Implement centralized gateway. chore: migrate from bitbucket to github MengxinLiu Yan Zhu remove dns from ls and bump new version make filter table forward chain default accept ipset exclude cluster service ip range fix: lb bugs read cidr from ns annotation fix: remove dns table from nodeswitch and remove unused other_config:namespace fix pod has no ip Distributed gateway implement fix: clean lost interface. feat: support subnet isolation feat: support dynamic qos fix: ovn restart issues fix: ovn restart issues fix: validate namespace switch annotations fix lint &&