antrea-io/antrea v2.1.1

Antrea v2.1.1

on GitHub

Added

• Add documentation for the NodeLatencyMonitor feature. (#6561, [@antoninbas])

Changed

• Close connection to IPFIX collector explicitly on Stop for FlowAggregator. (#6635, [@antoninbas])
• Run the IPPool webhook handler when SecondaryNetwork is enabled. (#6691, [@luolanzone])

Fixed

• On Windows, rely on PortStatus messages from OVS to install OpenFlow entries for a Pod instead of relying on a fixed timeout which can be hard to configure correctly; the code will now wait "indefinitely" but a NetworkNotReady event will be added to the Pod if the port is not ready after 30s. (#6763 #6889, [@wenyingd])
• Reconcile Pods with hostNetwork after Antrea Agent is restarted on Windows. (#6944, [@wenyingd])
• Match dstIP in ClassifierTable to fix a potential source MAC and IP mismatch issue on Windows when promiscuous mode is enabled. (#6528, [@XinShuYang])
• Ensure that promote_secondaries is set on IPAssigner interfaces to avoid the automatic removal of all other IP addresses in the same subnet when the primary IP address is deleted. (#6898 #6900, [@antoninbas])
• Fix audit logging for default deny all K8s NetworkPolicy rules. (#6855, [@qiyueyao])
• Improve memory copying logic to avoid a potential memory fault on Windows. (#6664 #6673, [@XinShuYang] [@tnqn])
• More robust system Tier creation / update for Antrea-native policies. (#6696, [@antoninbas])
• Fix an issue with ipset or iptables chain removal during Antrea Node NetworkPolicy updates or deletions. (#6707, [@hongliangl])
• Fix invalid template ID error in IPFIX exporter for FlowAggregator. (#6630, [@antoninbas])
• Fix the checker image tag when running antctl check cluster with a released antctl binary. (#6565, [@tnqn])
• Update the Finalizer of ResourceExport to be a domain-qualified string. (#6742, [@Dyanngg])