Change Log Highlights
This adds a bunch of fixes for some small to medium sized issues with the 1.3.0 release. Notable changes include:
--cleanup-configflag should now be more comprehensive. There were a couple of bugs introduced in the 1.3 release that caused this flag to not function at all. These have been fixed. Additionally, it now cleans up most, if not all kube-router artifacts, where before it would leave some lingering parts of the Network Policy Controller.injectRoutes(), the part of the Network Routes Controller that is responsible for injecting host routes based on BGP advertisements, has been completely overhauled.- Routes are now cleaned up and removed from the host when nodes leave. This prevents bugs around black-hole routes that are created when nodes are decommissioned and that IP space is later reused by a new node.
- Performance is improved by checking if the route is a withdrawal first, rather than adding the route and then immediately removing it
- Logging has been updated to no longer be so spammy for default actions
- Code has been refactored to be easier to read and understand
- IPVS metrics are now removed after the service is deleted rather than being continuously posted to prometheus (thanks @bhcleek!)
- kube-router nodes are now protected from default route BGP advertisements. Before this, kube-router had the potential to overwrite the default route on the node causing the node to no longer be contactable (thanks @lucasmundim!)
- Additional ipset locking was missing causing some errors around multiple invocations. This has been fixed.
Full Changelog
- d173c98 - (HEAD -> master, tag: v1.3.1, origin/master, origin/HEAD) Update to go-1.16.7 and go dependencies (3 days ago) <Manuel Rüger>
- bffdc72 - fix(npc): ordering of firewall / service rules (#1144) (4 days ago) <Aaron U'Ren>
- 35d334c - fix: add sleeps between iptables and ipset cleanup (8 days ago) <Aaron U'Ren>
- cafd69d - fix(NRC): reduce logging for egress cleanup errors (8 days ago) <Aaron U'Ren>
- fb07026 - fix(NSC): actually remove IPVS definitions (8 days ago) <Aaron U'Ren>
- bbc0666 - fix(NSC): add exists checking to Cleanup() (8 days ago) <Aaron U'Ren>
- 1a8c354 - fix(NPC): Cleanup() function overhaul (8 days ago) <Aaron U'Ren>
- 9bc55dc - fix(NPC): missed ipset locking (8 days ago) <Aaron U'Ren>
- 031d752 - feat(NPC): minor performance improvement (8 days ago) <Aaron U'Ren>
- 5156f87 - Add a default route 0.0.0.0/8 import policy deny rule (8 days ago)
- 693c48a - build(deps): bump k8s.io/klog/v2 from 2.9.0 to 2.10.0 (11 days ago) <dependabot[bot]>
- e9f9c44 - build(deps): bump k8s.io/cri-api from 0.21.2 to 0.21.3 (11 days ago) <dependabot[bot]>
- f24df68 - feat(go.mod): upgrade from 1.13 to 1.16 (11 days ago) <Aaron U'Ren>
- 2e08d47 - fix(go.mod): containerd CVE-2021-32760 (11 days ago) <Aaron U'Ren>
- abf9bd9 - Update GoBGP to v2.30.0 (11 days ago) <Manuel Rüger>
- ad86041 - build(deps): bump k8s.io/client-go from 0.21.2 to 0.21.3 (11 days ago) <dependabot[bot]>
- fc3973c - .github/ci.yml: Don't build containers for dependabot updates (11 days ago) <Manuel Rüger>
- d5a18ca - remove IPVS metrics (#1133) (2 weeks ago)
- 06e246f - fix(NRC): PR feedback fixes (2 weeks ago) <Aaron U'Ren>
- 445ad9a - fix(injectRoute): process withdrawls first (2 weeks ago) <Aaron U'Ren>
- 2e590a4 - fix(NRC): consolidate route delete logic (2 weeks ago) <Aaron U'Ren>
- d0501c0 - fix(injectRoute): cleanup tunnels & routes when peer drops (2 weeks ago) <Aaron U'Ren>
- 94640ac - doc(injectRoute): improve comments on logic flow (2 weeks ago) <Aaron U'Ren>
- 4959da4 - feat(NRC): reduce verbosity of log messages for common overlay cases (2 weeks ago) <Aaron U'Ren>
- 38222a3 - fact(injectRoute): extract setupOverlayTunnel() and cleanupTunnels() (2 weeks ago) <Aaron U'Ren>
- 63c3b90 - fact(injectRoute): extract parseBGPPath method to simplify (2 weeks ago) <Aaron U'Ren>
- e9be04e - fix: add nil checking to ipsetMutex cleanup actions (#1129) (4 weeks ago) <Aaron U'Ren>
- c26f98c - fix(ci): only run build actions on non-forks (6 weeks ago) <Aaron U'Ren>
- f3e8fc0 - fix(README.md): update badge link to GitHub Actions (6 weeks ago) <Aaron U'Ren>
- f8214ef - .github/workflows: Fix yaml error (6 weeks ago) <Manuel Rüger>
- 8697d81 - .github: Fix tag workflow (6 weeks ago) <Manuel Rüger>
- 36e1de9 - go.mod: Update dependencies (6 weeks ago) <Manuel Rüger>
- fc4ddef - .github: Fix tag workflow (6 weeks ago) <Manuel Rüger>
- 9b7f98e - .github: Fix Tag/Push workflow (6 weeks ago) <Manuel Rüger>