From v1.5.0 Kube-OVN takes use of OVN distributed gateway router to implement SNAT and EIP functions. Users now can controller the external IP of a groups of pods. SFC functions is also integrated into OVN to further extend the capability of OVN. In this version, users can also enabled the TLS connection between Kube-OVN components to secure the communication. We also enhance the monitoring and diagnose tools, more metrics and Grafana dashboards are added to better expose the internal stats of the network.
New Feature
- Pod level SNAT and EIP support, please check the Guide
- Integrate SFC function into OVN
- OVN-Controller graceful stop
- Mirror config can be updated dynamically
- Set more metadata to interface external-ids
Security
- Support TLS connection between components
- Change DB file access mode
Monitoring
- Add more metrics to pinger dashboard
- Add more metrics to kube-ovn-cni and a new Grafana dashboard
- Diagnose show ovn-nb and ovn-sb overview
Mics
- Update CI k8s to 1.19
- Change kube-ovn-cni updateStrategy
- Move CNI conf when kube-ovn-cni ready
Bugfix
- Use NodeName as OVN chassis name
- Stop OVN-IC if disabled
- Uninstall scripts will clean up ipv6 iptables and ipset
- Bridging-mapping may conflict, if enable vlan and external gateway
- Pinger ipv6 mode fetch portmaping failed
- Pinger diagnose should reuse cmd args