kubeovn/kube-ovn v1.15.0

on GitHub

v1.15.0 (2026-01-01)

Notable Changes

• ACL log supports ratelimiting. #5938
• Subnet with centralized gateway now supports nodeSelectors. #5956
• Overlay encapsulation NIC selection. #5946
• Performace: skip conntrack for specific dst CIDRs. #5821
• NetworkPolicy supports lax mode which only deny traffic type of TCP, UDP and SCTP. That means ARP, ICMP and DHCP traffic are alaways allowed. #5745
• Remove internal-port type interface code. #5794
• IPPool
  • Multiple IPPools now can bind to the same Namespace. #5731
  • Pods in a bound namespace will only get IPs from the bound pool(s), not other ranges in the subnet. #5731
  • IPPool will create an AddressSet that can be work with VPC Policy Route and ACL. #5920
• AdminNetworkPolicy now supports specify egress peers using FQDNs. #5703
• Using ARP for IPv4 network ready check: now you don't need ACL allow rules for gateway to make Pod running. #5716
• Non-primary CNI mode: you can run Kube-OVN as the secondary only network, without annoying unused annotations and logical switch port allocations. #5618
• VPC NAT Gateway:
  • No default EIP mode: the secondary interface can initialize without a default EIP to avoid the waste. #5605
  • Custom routes: you can control the route rules within the vpc-nat-gateway Pods to control traffic paths. #5608
  • Gratuitous ARP: VPC NAT Gateway automatically sends gratuitous ARP packets during initialization to accelerate network convergence. #5607
• Healthchecks for static endpoints in SwitchLBRules: SLR with both selector or endpoints key can support healthchecks. #5435
• Underlay
  • Node Selectors for ProviderNetwork: instead of adding/removing nodes to the ProviderNetwork one by one, you can use node selectors to simplify the workflow. #5518
  • Different NetworkProviders can now share the same VLAN. #5471
  • Auto create VLAN sub-interfaces. #5966
  • Auto move VLAN sub-interfaces to OVS bridges. #5949
• Adding pod_name and pod_namespace labels to interface metrics. #5463
• IPSec
  • Support cert-manager to issue certificates. #5365
  • Request new certificate if current certificate is not trusted. #5710
• kubectl-ko
  • Collect IPSec and xFRM information. #5472
  • Replace Endpoint with EndpointSlice. #5425
• NetworkAttachment caching: reduce APIServer load in large-scale deployments with Multus. #5386
• Upgrade OVS to 3.5 and OVN to 25.03. #5537

Contributors

• Abdul Basit
• Abhishek Pandey
• Bryan Lee
• Caleb Tallquist
• Congqi Zhao
• Copilot
• DiMalovanyy
• Hargrove Wang
• Joachim Hill-Grannec
• Kevin Carter
• Mengxin Liu
• Paul
• SKALA NETWORKS
• Six
• Vishal Mohan
• andrewlee1089
• aoc55
• changluyi
• cmdy
• dependabot[bot]
• dnugmanov
• github-actions[bot]
• isabelleatkins
• lfpython
• mengyu0829
• narutoqq
• pengpeng wu
• renovate[bot]
• xieyanker
• zbb88888
• zhangzujian
• 张祖建