Skip to content

Latest commit

 

History

History
136 lines (108 loc) · 12 KB

CHANGELOG-1.11.md

File metadata and controls

136 lines (108 loc) · 12 KB
Raw

Changelog 1.11

1.11.4 - 2023-10-18

Fixed

  • Fix a deadlock issue in NetworkPolicy Controller which causes a FQDN resolution failure. (#5566 #5583, @Dyanngg @tnqn)
  • Fix NetworkPolicy span calculation to avoid out-dated data when multiple NetworkPolicies have the same selector. (#5554, @tnqn)
  • Fix SSL library downloading failure in Install-OVS.ps1 on Windows. (#5510, @XinShuYang)
  • Fix rollback invocation after CmdAdd failure in CNI server and improve logging. (#5548, @antoninbas)
  • Do not apply Egress to traffic destined for ServiceCIDRs to avoid performance issue and unexpected behaviors. (#5495, @tnqn)
  • Do not delete IPv6 link-local route in route reconciler to fix cross-Node Pod traffic or Pod-to-external traffic. (#5483, @wenyingd)
  • Fix discovered Service CIDR flapping on Agent start. (#5017, @tnqn)

1.11.3 - 2023-09-04

Changed

  • Change the default flow's action to drop in ARPSpoofGuardTable to effectively prevent ARP spoofing. (#5378, @hongliangl)
  • Stop using /bin/sh and invoke the binary directly for OVS commands in Antrea Agent. (#5364, @antoninbas)
  • Increase the rate limit setting of PacketInMeter and the size of PacketInQueue. (#5460, @GraysonWu)
  • Upgrade Open vSwitch to 2.17.7. (#5225, @antoninbas)

Fixed

  • Fix IPv4 groups containing IPv6 endpoints mistakenly in dual-stack clusters in AntreaProxy implementation. (#5194, @tnqn)
  • Fix ClusterClaim webhook bug to avoid ClusterClaim deletion failure. (#5075, @luolanzone)
  • Ensure the Egress IP is always correctly advertised to the network, including when the userspace ARP responder is not running or when the Egress IP is temporarily claimed by multiple Nodes. (#5127, @tnqn)
  • Fix status report when no-op changes are applied to Antrea-native policies. (#5096, @tnqn)
  • Bump up libOpenflow version to fix a PacketIn response parse error. (#5157, @wenyingd)
  • Remove NetworkPolicyStats dependency of MulticastGroup API to fix the empty list issue when users run kubectl get multicastgroups even when the Multicast is enabled. (#5367, @ceclinux)
  • Fix an Antrea Controller crash issue in handling empty Pod labels for LabelIdentity when the config enableStretchedNetworkPolicy is enabled for Antrea Multi-cluster. (#5404 #5449, @Dyanngg)
  • Do not attempt to join Windows agents to the memberlist cluster to avoid misleading error logs. (#5434, @tnqn)
  • Fix the burst setting of the PacketInQueue to reduce the DNS response delay when a Pod has any FQDN policy applied. (#5456, @tnqn)

1.11.2 - 2023-06-07

Changed

Fixed

  • In Antrea Agent Service CIDR discovery, prevent headless Services from updating the discovered Service CIDR to avoid overwriting the default route of host network unexpectedly. (#5008, @hongliangl)
  • Use LOCAL instead of CONTROLLER as the in_port of packet-out messages to fix a Windows agent crash issue. (#4992, @tnqn)
  • Fix a bug that a deleted NetworkPolicy is still enforced when a new NetworkPolicy with the same name exists. (#4986, @tnqn)
  • Improve Windows cleanup scripts to avoid unexpected failures. (#4722, @wenyingd)
  • Fix a race condition between stale controller and ResourceImport reconcilers in Antrea Multi-cluster controller. (#4853, @Dyanngg)
  • Make FQDN NetworkPolicy work for upper case FQDNs. (#4934, @GraysonWu)
  • Run agent modules that rely on Services access after AntreaProxy is ready to fix a Windows agent crash issue. (#4946, @tnqn)
  • Fix the Antrea Agent crash issue which is caused by a concurrency bug in Multicast feature with encap mode. (#4903, @ceclinux)

1.11.1 - 2023-04-20

Changed

  • Document the limit of maximum receiver group number on a Linux Node for multicast. (#4850, @ceclinux)

Fixed

  • Fix Service not being updated correctly when stickyMaxAgeSeconds or InternalTrafficPolicy is updated. (#4845, @tnqn)
  • Fix EndpointSlice API availablility check to resolve the issue that AntreaProxy always falls back to the Endpoints API when EndpointSlice is enabled (#4852, @tnqn)
  • Fix the Antrea Agent crash issue when large amount of multicast receivers with different multicast IPs on one Node start together.(#4870, @ceclinux)

1.11.0 - 2023-03-22

  • The EndpointSlice feature is graduated from Alpha to Beta and is therefore enabled by default.

Added

  • Add the following capabilities to Antrea-native policies:
    • ClusterSet scoped policy rules now support with the namespaces field. (#4571, @Dyanngg)
    • Layer 7 policy rules now support traffic logging. (#4625, @qiyueyao)
    • The implementation of FQDN policy rules has been extended to process DNS packets over TCP. (#4612 #4732, @GraysonWu @tnqn)
  • Add the following capabilities to the AntreaProxy feature:
    • Graduate EndpointSlice from Alpha to Beta; antrea-agent now listens to EndpointSlice events by default. (#4634, @hongliangl)
    • Support ProxyTerminatingEndpoints in AntreaProxy. (#4607, @hongliangl)
    • Support rejecting requests to Services without available Endpoints. (#4656, @hongliangl)
  • Add the following capabilities to Egress policies:
    • Support limiting the number of Egress IPs that can be assigned to a Node via new configuration option egress.maxEgressIPsPerNode or Node annotation "node.antrea.io/max-egress-ips". (#4593 #4627, @tnqn)
    • Add antctl get memberlist CLI command to get memberlist state. (#4611, @Atish-iaf)
  • Support "noEncap", "hybrid", and "networkPolicyOnly" in-cluster traffic encapsulation modes with Multi-cluster Gateway. (#4407, @luolanzone)
  • Enhance CI to validate Antrea with Rancher clusters. (#4496, @jainpulkit22)

Changed

  • Ensure cni folders are created when starting antrea-agent with containerd on Windows. (#4685, @XinShuYang)
  • Decrease log verbosity value for antrea-agent specified in the Windows manifest for containerd from 4 to 0. (#4676, @XinShuYang)
  • Bump up cni and plugins libraries to v1.1.1. (#4425, @wenyingd)
  • Upgrade OVS version to 2.17.5. (#4742, @antoninbas)
  • Extend the message length limitation in the Conditions of Antrea-native policies to 256 characters. (#4574, @wenyingd)
  • Stop using ClusterFirstWithHostNet DNSPolicy for antrea-agent; revert it to the default value. (#4548, @antoninbas)
  • Perform Service load balancing within OVS for Multi-cluster Service traffic, when the local member Service of the Multi-cluster Service is selected as the destination. (#4693, @luolanzone)
  • Rename the multicluster.enable configuration parameter to multicluster.enableGateway. (#4533, @jianjuns)
  • Add the multicluster.enablePodToPodConnectivity configuration parameter for antrea-agent to enable Multi-cluster Pod-to-Pod connectivity. (#4605, @hjiajing)
  • No longer install Whereabouts CNI to host. (#4617, @jianjuns)
  • Add an explicit Secret for the vm-agent ServiceAccount to the manifest for non-Kubernetes Nodes. (#4560, @wenyingd)
  • Change the toService.scope field of Antrea ClusterNetworkPolicy to an enum. (#4562, @GraysonWu)

Fixed

  • Fix route deletion for Service ClusterIP and LoadBalancerIP when AntreaProxy is enabled. (#4711, @tnqn)
  • Fix Service routes being deleted on Agent startup on Windows. (#4470, @hongliangl)
  • Avoid duplicate Node Results in Live Traceflow Status. (#4715, @antoninbas)
  • Fix OpenFlow Group being reused with wrong type because groupDb cache was not cleaned up. (#4592, @ceclinux)
  • Ensure NO_FLOOD is always set for IPsec tunnel ports and TrafficControl ports. (#4654 #4419, @xliuxu)
  • Fix Agent crash in dual-stack clusters when any Node is not configured with an IP address for each address family. (#4480, @hongliangl)
  • Fix antctl not being able to talk with GCP kube-apiserver due to missing platforms specific imports. (#4494, @luolanzone)