kubeovn/kube-ovn v1.16.8

on GitHub

v1.16.8 (2026-09-28)

This release fixes VIP reconciliation and VMI migration handling, reduces IPv6 neighbor solicitation flooding in underlay networks, and updates containerd to v2.2.9 to address CVE-2026-53493. It also adds image pull secret support for VPC NAT gateway pods.

Changes

• 95130b034 Update containerd to v2.2.9. (#7540)
• 87a7065d8 Backport pending VMI migration handling. (#7535)
• e4ab04abc Serialize VIP virtual port reconciliation. (#7525)
• 1dddc42a2 Support image pull secrets for VPC NAT gateway pods. (#7511)
• bd4630d6a Avoid flooding IPv6 neighbor solicitations in underlay networks. (#7516)
• 925057f36 Delete node router policies by owner on node deletion. (#7510)
• 6b283d503 Keep a single OVN NB monitor for ACL sampling. (#7509)
• 62ba759a3 Reconcile distributed-subnet allowed-address-pair VIP ports. (#7506)

Full Changelog: v1.16.7...v1.16.8