Project: Antrea (Runtime / Cloud Native Network)
File: CHANGELOG-2.0.md

Some deprecated APIs have been removed in Antrea v2.0. Before upgrading, please read these carefully. Support `LoadBalancerIPMode` in AntreaProxy to implement K8s . (, [@hongliangl]) Add `sameLabels` field support for Antrea ClusterNetworkPolicy peer Namespace selection to allow users to create ACNPs that isolate Namespaces based on their label values. (, [@Dyanngg]) Add multiple physical interfaces support for the secondary network bridge. (, [@aroradaman]) Use a Node's primary NIC as the secondary OVS bridge physical interface. (, [@aroradaman]) Add user documentation for Antrea native secondary network support. ( , [@jianjuns] [@antoninbas]) Add a new versioned API `NetworkPolicyEvaluation` and a new antctl sub-command for querying the effective policy rule applied to particular traffic. ( , [@qiyueyao]) Multiple deprecated APIs, fields and options have been removed from Antrea. Remove deprecated v1alpha1 CRDs `Tier`, `ClusterNetworkPolicy`, `NetworkPolicy`, `Traceflow` and `ExternalEntity`. ( , [@luolanzone] [@hjiajing] [@antoninbas]) Remove deprecated v1alpha2 and v1alpha3 CRDs `ClusterGroups`, `ExternalIPPool`, `ClusterGroup` and `Group`. ( , [@luolanzone] [@antoninbas]) Remove deprecated `ServiceAccount` field in `ClusterSet` type for Antrea Multi-cluster. (, [@luolanzone]) Remove deprecated options `enableIPSecTunnel`,`multicastInterfaces`, `multicluster.enable` and `legacyCRDMirroring`. (, [@luolanzone]) Clean up unused code for NodePortLocal and remove the deprecated `nplPortRange` config. (, [@luolanzone]) Clean up deprecated APIServices. (, [@tnqn]) Documentation has been updated to reflect recent changes and provide better guidance to users. Add upgrade instructions for Antrea v2.0. (, [@antoninbas]) Update the OVS pipeline document and workflow diagram to keep them up to date. (, [@hongliangl]) Clarify documentation for `IPPool` and `ExternalIPPool` CRDs. (, [@antoninbas]) Document Pods using FQDN based policies must respect DNS TTL. (, [@tnqn]) Document the limitations of Audit Logging for policy rules. (, [@antoninbas]) Optimizing Antrea binaries size. Optimize package organization to reduce antctl binary size. (, [@tnqn]) Reduce antrea-cni binary size by removing unnecessary import packages. (, [@tnqn]) Strip all debug symbols from Go binaries by default. (, [@antoninbas]) Disable cgo for all Antrea binaries. (, [@antoninbas]) Increase the minimum supported Kubernetes version to v1.19. (, [@hjiajing]) Add OVS groups dump information to support bundle to help troubleshooting. (, [@shikharish]) Add `egressNodeName` in flow records for Antrea Flow Aggregator. (, [@Atish-iaf]) Add `EgressNode` field in the Traceflow Egress observation to include the name of the Egress Node. (, [@Atish-iaf]) Upgrade `IPPool` CRD to v1beta1 and make the subnet definition consistent with the one in `ExternalIPPool` CRD. (, [@mengdie-song]) Request basic memory for antrea-controller to improve its scheduling and reduce its OOM adjustment score, enhancing overall robustness. (, [@tnqn]) Increase default rate limit of antrea-controller to improve performance for batch requests. (, [@tnqn]) Remove Docker support for antrea-agent on Windows, update Windows documentation to remove all Docker-specific instructions, and all mentions of (userspace)

( , [@XinShuYang] [@antoninbas]) Stop publishing the legacy unified image. (, [@antoninbas]) Avoid unnecessary DNS queries for FQDN rule of NetworkPolicy in antrea-agent. (, [@tnqn]) Stop using `projects.registry.vmware.com` for user-facing images. (, [@antoninbas]) Fall back to lenient decoding when strict decoding config fails to tolerate unknown fields and duplicate fields, ensuring forward compatibility of configurations. (, [@tnqn]) Skip loading `openvswitch` kernel module if it's already built-in. (, [@antoninbas]) Persist TLS certificate and key of antrea-controller and sync the CA cert periodically to improve robustness. ( , [@tnqn]) Add more validations for `ExternalIPPool` CRD to improve robustness. (, [@aroradaman]) Add Antrea L7 NetworkPolicy logs for `allowed` HTTP traffic. (, [@qiyueyao]) Update maximum number of buckets to 700 in OVS group add/insert_bucket message. (, [@hongliangl]) Add a flag for antctl to print OVS table names when users run `antctl get ovsflows --table-names-only`. ( , [@luolanzone]) Improve log message when antrea-agent fails to join a new Node. (, [@roopeshsn]) Remove the prefix `rancher-wins` when collecting antrea-agent logs on Windows. (, [@wenyingd]) Upgrade K8s libraries to v0.29.2. (, [@hjiajing]) Upgrade base image from UBI8 to UBI9 for Antrea UBI images. (, [@xliuxu]) Fix nil pointer dereference when `ClusterGroup`/`Group` is used in NetworkPolicy controller. (, [@tnqn]) Disable `libcapng` to make logrotate run as root in UBI images to fix an OVS crash issue. (, [@xliuxu]) Fix a race condition in antrea-agent Traceflow controller when a tag is associated again with a new Traceflow before the old Traceflow deletion event is processed. (, [@tnqn]) Change the maximum flags from 7 to 255 to fix the wrong TCP flags validation issue in `Traceflow` CRD. (, [@gran-vmv]) Use 65000 MTU upper bound for interfaces in `encap` mode to account for the MTU automatically configured by OVS on tunnel ports, and avoid packet drops on some clusters. (, [@antoninbas]) Install multicast related iptables rules only on IPv4 chains to fix the antrea-agent initialization failure occurred when the Multicast feature is enabled in dual-stack clusters. (, [@wenyingd]) Remove incorrect AntreaProxy warning on Windows when `proxyAll` is disabled. (, [@antoninbas]) Explicitly set kubelet's log files in Prepare-Node.ps1 on Windows, to ensure that they are included in support bundle collections. (, [@wenyingd]) Add validation on antrea-agent options to fail immediately when encryption is requested and the Multicast feature enabled. (, [@wenyingd]) Don't print the incorrect warning message when users run `antrea-controller --version` outside of K8s. (, [@prakrit55]) Record event when EgressIP is uninstalled from a Node and remains unassigned. (, [@jainpulkit22]) Fix a bug that the local traffic cannot be identified on `networkPolicyOnly` mode. (, [@hongliangl]) Use reserved OVS controller ports for the default Antrea ports to fix a potential `ofport` mismatch issue. (, [@antoninbas])