New Feature
- Basic support for custom VPC
- DualStack support
- Overlay to underlay gateway through BGP
- Support binding pod to subnet
- Support distributed eip
- Support disable interconnection for specific subnet
- Iface now support regex
install.shsupports DPDK resource configuration- Remove cluster ip dependency for ovn/ovs components
- Change base image to ubuntu
- Update OVN to 20.09
Monitoring
- Add OVN/OVS monitor
- Add ovs client latency metrics
- Add ping total count metric
- Add
ovs-vsctlshow to diagnose results - Add
kubectl describe noto diagnose results - Add ovs-vsctl show to diagnose results
- Add available IP metrics
- Add more dashboard
Mics
- CI: change to official docker buildx action
- Perf: remove default acl rules
- ci: add github code scan
- Add version info
- Reduce image size
- Perf: accelerate ic and ex gw update
- Refactor iptable logs
- Tolerate all taints
- OVN/OVS log rotation
- Update Go to 1.15
- Multi arch image
Bugfix
- Remove not alive pod in networkpolicy portGroup
- Delete Pod when marked with deletionTimestamp
- Use the internal IP when node try to connect to pod
- Do not advertise node switch cidr when enable ovn-ic
- Wrong proto str for udp diagnose
- IPv6 len mismatch
- Add default SSL var for compatibility
- Wrong ipv6 network format when update subnet
- Broken RPM link
- Default SSL var for compatibility
- Wrong iptable order
- Check multicast and loopback subnet
- CodeQL scan warnings
- Fix cleanup scripts
- Check ipv6 requirement before start
- Check if ovn-central ip exists in
NODE_IPSbefore start - Fix the problem of confusion between old and new versions of crd
- Fix external-address config description
- Add resources limits to avoid eviction
- NAT rules can be modified
- Masquerade other nodes to local pod to avoid NodePort triangle traffic
- OVN-IC support SSL
- Pod static ip validation
- Multiple rule networkpolicy issues
- Modify service vip parse error
- CNIServer default encap ip use node ip