Skip to content

NEXT.md

Latest commit

 

History

History
64 lines (59 loc) · 6.08 KB

NEXT.md

File metadata and controls

64 lines (59 loc) · 6.08 KB

What's Next

This document lists the features merged into the master branch for the next minor release.

Post-v1.15.0

  • NetworkPolicy now supports provider-scoped policies for multi-network pods using the ovn.kubernetes.io/policy-for annotation. #6223
  • Support static IP/MAC for multiple interfaces on the same logical switch. #6060
  • MetalLB underlay integration now supports IPv6 and dual-stack. #6159
  • KubeVirt live-migration multi-chassis options now apply to all VM NICs, not just the primary one. #6241
  • Add human-readable descriptions to all Kube-OVN CRD fields for better kubectl explain output. #6133 #6147
  • VPC NAT Gateway
    • Support user-defined annotations on NAT gateway Pod template. #6256
  • Interconnection
    • Add vendor ID to transit switches to avoid conflicts with other OVN controllers. #6186
  • Reliability
    • OpenFlow synchronization: detect and recover from stale or missing OVS flows automatically. #6117
    • OVN DB: back up Raft header before rejoining cluster to improve recovery. #6106
  • Performance
    • Strip managedFields from informer cache to reduce memory usage. #6119
    • Add field selectors to informer factory to reduce API server load. #6091
  • Security
    • Replace wildcard RBAC verbs with explicit verb lists. #6233
    • Specify ephemeral storage limits for containers. #6259
  • Helm Chart
    • Make DaemonSet update strategy configurable via values.yaml. #6136
    • Introduce extraEnv variable for all components. #6142
    • Add affinity and nodeSelector support for ovs-ovn and ovs-ovn-dpdk DaemonSets. #6308
    • Add external-gateway-config-ns option for controller. #6211

Post-v1.14.0

  • ACL log supports ratelimiting. #5938
  • Subnet with centralized gateway now supports nodeSelectors. #5956
  • Overlay encapsulation NIC selection. #5946
  • Performace: skip conntrack for specific dst CIDRs. #5821
  • NetworkPolicy supports lax mode which only deny traffic type of TCP, UDP and SCTP. That means ARP, ICMP and DHCP traffic are alaways allowed. #5745
  • Remove internal-port type interface code. #5794
  • IPPool
    • Multiple IPPools now can bind to the same Namespace. #5731
    • Pods in a bound namespace will only get IPs from the bound pool(s), not other ranges in the subnet. #5731
    • IPPool will create an AddressSet that can be work with VPC Policy Route and ACL. #5920
  • AdminNetworkPolicy now supports specify egress peers using FQDNs. #5703
  • Using ARP for IPv4 network ready check: now you don't need ACL allow rules for gateway to make Pod running. #5716
  • Non-primary CNI mode: you can run Kube-OVN as the secondary only network, without annoying unused annotations and logical switch port allocations. #5618
  • VPC NAT Gateway:
    • No default EIP mode: the secondary interface can initialize without a default EIP to avoid the waste. #5605
    • Custom routes: you can control the route rules within the vpc-nat-gateway Pods to control traffic paths. #5608
    • Gratuitous ARP: VPC NAT Gateway automatically sends gratuitous ARP packets during initialization to accelerate network convergence. #5607
  • Healthchecks for static endpoints in SwitchLBRules: SLR with both selector or endpoints key can support healthchecks. #5435
  • Underlay
    • Node Selectors for ProviderNetwork: instead of adding/removing nodes to the ProviderNetwork one by one, you can use node selectors to simplify the workflow. #5518
    • Different NetworkProviders can now share the same VLAN. #5471
    • Auto create VLAN sub-interfaces. #5966
    • Auto move VLAN sub-interfaces to OVS bridges. #5949
  • Adding pod_name and pod_namespace labels to interface metrics. #5463
  • IPSec
    • Support cert-manager to issue certificates. #5365
    • Request new certificate if current certificate is not trusted. #5710
  • kubectl-ko
    • Collect IPSec and xFRM information. #5472
    • Replace Endpoint with EndpointSlice. #5425
  • NetworkAttachment caching: reduce APIServer load in large-scale deployments with Multus. #5386
  • Upgrade OVS to 3.5 and OVN to 25.03. #5537