Changelog
afd5dd7 .github/workflows: Fix yaml error
127132b .github: Fix tag workflow
112deed go.mod: Update dependencies
de5526e .github: Fix tag workflow
e79f024 .github: Fix Tag/Push workflow
4a3940f .github/workflows: Small fix
e433f0e Apply review feedback
0914305 Build binaries via Dockerfile, migrate to Github Actions
366b95f build(deps): bump github.com/prometheus/client_golang
cef7f47 build(deps): bump k8s.io/cri-api from 0.21.0 to 0.21.2
2521525 gobgp: Version bump to 2.29.0
59b2c44 build(deps): bump google.golang.org/grpc from 1.38.0 to 1.39.0
039f87d build(deps): bump github.com/aws/aws-sdk-go from 1.38.55 to 1.38.70
7f6115d build(deps): bump k8s.io/client-go from 0.21.1 to 0.21.2
73b1b03 cache the check of wait option support in iptables-restore
751981c update alpine image to 3.14 for latest iptables-restore command with --wait option, and use wait where its available
468670b go.mod: Update to gobgp 2.28.0
c8f7daf fix lint errors
2c4dd7d addressing review comments
4c8cfc9 bug fix
93fe004 bug fixes
3d407dc make rules to ACCPET related/established traffic as first entry in pod firewall chain
d684ec0 add logic to explicitly ACCEPT traffic from/to the pod if its permitted by applicable network policies. If there are no network policies then by default ACCEPT the pod traffic
21473ed Add support for kubernetes endport field (#1080)
91a1b37 .github: Add Go Releaser Step (#1100)
011b7aa fix typo Gracefule -> Graceful
b39923a build(deps): bump google.golang.org/grpc from 1.37.0 to 1.38.0
5ed68d4 build(deps): bump github.com/aws/aws-sdk-go from 1.38.30 to 1.38.55
ea1605e build(deps): bump github.com/onsi/ginkgo from 1.16.1 to 1.16.4
863bd4d build(deps): bump k8s.io/klog/v2 from 2.8.0 to 2.9.0
2a56d3c build(deps): bump github.com/docker/docker
cf08cf5 build(deps): bump github.com/stretchr/testify from 1.6.1 to 1.7.0
abd4eea build(deps): bump k8s.io/client-go from 0.21.0 to 0.21.1
7e92ad9 fix(goreleaser): add version and date to published binaries
d90c753 fact(NPC): refactor isPodUpdateNetPolRelevant
1a82db7 fix(NPC): check if new pod is actionable
3dc5c3f fix(NPC): remove HostNetwork check from OnPodUpdate
13e0a39 fix(NPC): check if pod is actionable
fa8d69e fix: add locking around ipset invocations
e8a81f3 .github: Enable dependabot to manage dependencies
21c5290 feat(iptables): add upstream wrapper script
295c862 travis-deploy: Log into docker
612d9a3 Update Build and Test Procedures
c38c3ac build-image: Remove outdated script
4306e5d feat(DSR): make TCPMSS based on primary link MTU
a610596 fact(GetMTUFromNodeIP): move up a layer of abstraction
e223ea8 Fix DSR(tunneling) mode mtu limit
45b7fd1 fix(NPC): parse NodePorts as unsigned ints
14a03a6 fix(bgp.md): misspellings and doc conformance
9cbc376 feat(bgp): add BGP communities support via node annotation
ae9d0e3 fix(bgp_policies_test.go): actually test policy
fa7bcde fix(bgp_policies_test.go): use startBgpServer()
a5d6560 fact(bgp_policies_test): move BGP policy tests into their own file
b2d8af4 doc(bgp.md): add info about password file configs
fce90b0 Oops, i guess my unit test was flaky in #1068
e94cba6 go.mod: Update dependencies
0ad00df Mention k0sproject in getting started guide
2460189 skip host network pods when selecting pods to apply ingress/egress netpol
5255127 skip hostnetwok pod's from enforcing network policies
c555f91 update maintainers (#1074)
bd5ee4f fix(nsc): Overly eager IPVS updating
f0e1a13 Makefile: Apply workaround for go install on multi-arch
e8c1ba7 Use go install for gobgp
8d47317 moq: Regenerate
66247fe Update dependencies
a821284 Update to go 1.16
18d2a3b Swap temporary IPSets during ipset restore (#1068)
ef827d3 fix: protect uint32 conversion
1816886 fix: remove possible BGP password leak via logs
be01f31 fact: other misc cleanups
0faf772 fix: don't overload function names with vars
53cfbe3 fix: return early when we might be holding nil references
4efa5cc fact: remove function parameters that are never referenced
a86b3fa fact: handle errors from Close() explicitely
57ddac3 fact(NSC): consolidate repeat logic
96675e6 fix: don't capitalize error messages
e9c77d0 fix(comments): misspellings and bad doc strings
1c961ba fix: don't check upper bound of 16 bit int
94785f1 .github: Add codeql scanner
70aa028 doc(testing.md): remove vagrant-based testing doc
2931e53 fix(vagrant): remove vagrant stuff that hasn't worked in a while
46f54e9 Fix PMTU discovery for service IPs (#733)
d74f5c8 doc(user-guide.md): clarify externalips hairpin option
5fc39db Add hairpin support for externalIps
7d47aef Replace github.com/golang/glog with k8s.io/klog/v2
6bedf27 Drop vendor, update dependencies, upgrade docker images (#1052)