v1.14.0

github-actions released this 25 Jun 03:38

85a45ce

v1.14.0 (2025-06-25)

85a45ce30 release vm ip when vm is stopped then deleted (#5390)
904ac9afd wrong code (#5391)
8194e60ff vpc egress gateway: fix matching vpc (#5389)
936150dd2 fix migrate down time (#5388)
61f577ff3 fix duplicate acls because of parentkey (#5357)
94c514e73 fix(slr): support switchlbrules targeting subnets with non-default providers (#5376)
a2db6b178 u2o keep src flow should consider multi-vlan on the same provider (#5385)
ea758a79d bump k8s to v1.32.6 (#5383)
c386c7cdf base: fix login shell of user sync (#5384)
afdec4c35 fix(slr): deleting old entries from ipmapping to avoid clogging loadbalancer (#5380)
5a66b6626 feature: perform duplicate address detection if ipv6 address has a dadfailed flag (#5156)
22ba1c035 base: set login shell to /usr/sbin/nologin (#5382)
f58127989 chore(deps): update dependency cert-manager to v1.18.1 (#5373)
7fb6efd88 fix(deps): update module github.com/containerd/containerd/v2 to v2.1.3 (#5381)
79a799646 chore(deps): update dependency cilium to v1.17.5 (#5379)
28ea8670b ci: increase multus-cni resource limits (#5378)
46c8045eb fix(slr): switchlbrule doesn't support multi-homed/ipv6-first pods (#5375)
016f52a01 vpc egress gateway: drop traffic if no nexthop is available (#5370)
5e4e20aaf base: remove unused packages (#5368)
501b4e8e1 fix ip cr not delete with pod in the case of subnet not exist (#5364)
2aeea8629 u2o keep src mac (#5192)
9d398faaa fix: add validation to prevent subnet and VPC with the same name (#5371)
574b33a2f chore(deps): update dependency helm to v3.18.3 (#5366)
2865d3db8 fix modernize lint (#5363)
06540ebad chore(deps): update dependency gosec to v2.22.5 (#5362)
29c25ab0c docs: updated CHANGELOG.md (#5361)
33ff4cd73 fix(deps): update module github.com/containerd/containerd/v2 to v2.1.2 (#5354)
1fceea23e fix(slr): address family and familypolicy isn't correct (#5349)
49bbed8d3 controller: migrate acl tier after upgrade (#5351)
82ef65ff9 fix vpc egress gateway not applied to new pods (#5348)
c40c6e38b use group to reduce noisies
cab9fa964 add renovate label and ignore windows upgrade
ddaf03eee add return for enqueueUpdateIP error (#5350)
1b4f2f558 fix(deps): update module kubevirt.io/client-go to v1.5.2 (#5340)
557f68652 chore(deps): update dependency kubevirt to v1.5.2 (#5338)
f1c5e4631 docs: updated CHANGELOG.md (#5347)
241398a1e fix sts/vm lsp in incorrect port groups after rescheduled to another node (#5344)
d4ddd23a9 fix(deps): update module kubevirt.io/api to v1.5.2 (#5339)
e30a970b2 chore(deps): update dependency cert-manager to v1.18.0 (#5341)
9ab91ada8 fix(deps): update kubernetes packages to v0.33.1 (#5329)
a5940a234 base: build openssl fips module from deb source (#5331)
4d6274bcd fix: vm has multi nic in the same subnet, but release all (#5336)
cfcce171e docs: updated CHANGELOG.md (#5335)
3dc7a64ce merge dad check to 1.12 (#5334)
bbd62e894 fix fips not really replace (#5278)
581425bc9 netpol: fix missing ACL name (#5281)
7624feb07 fix: kubectl-ko: properly get the number of nodes (#5327)
97ff89de2 fix(deps): update module gopkg.in/k8snetworkplumbingwg/multus-cni.v4 to v4.2.1 (#5330)
dcdf899ea chore(deps): update dependency multus to v4.2.1 (#5328)
7ecf5339e chore(deps): update dependency ubuntu to v24 (#5315)
21286537a chore(deps): update dependency metallb to v0.15.2 (#5313)
a7e439f2c docs: updated CHANGELOG.md (#5325)
eb395857f bump go to 1.24.4 (#5321)
c09b19d0c fix(deps): update module go.universe.tf/metallb to v0.15.2 (#5314)
3fb0dcc56 [BUG] Request Latency 99th Quantile series labels are not unique (#5320)
96f05583b chore: add gomodTidy to postUpdateOptions
59619e990 chore: release branch automate security updates (#5311)
7ad7db246 chore: remove Dependabot configuration file
7e6728ce3 tls: rotate self-signed key/certificate (#5303)
fe5161e1c chore(deps): update dependency metallb to v0.15.0 (#5308)
cc4c701d1 chore(deps): update aquasecurity/trivy-action action to v0.31.0 (#5307)
3a96257a9 ovn fip spec distributed and support v4:v6 v6:v4 (#5283)
82b73fece fix podcidr route still use join ip as src ip (#5287)
04d429faf chore(deps): update dependency helm to v3.18.2 (#5305)
bd7a40e7d feat(controller): add database health check (#5294)
f14f44113 fix(deps): update module github.com/puzpuzpuz/xsync/v3 to v4 (#5302)
05e9fbf19 fix(deps): update module github.com/containerd/containerd to v2 (#5301)
1244a4ff4 fix(deps): update module github.com/cenkalti/backoff/v4 to v5 (#5300)
ddf54e4e7 tls: add options to set tls min/max version and cipher suites (#5289)
b6934cf08 build(deps): bump github.com/docker/docker (#5295)
baaf5d5f0 chore(deps): update dependency kind to v0.29.0 (#5297)
e4d9a05d6 chore(deps): update dependency kwork to v0.7.0 (#5293)
ba1ba78d7 chore(deps): update dependency helm to v3.18.1 (#5292)
4266f1875 chore: Configure Renovate (#5253)
2668ef876 build(deps): bump github.com/docker/docker (#5290)
9cbafeec8 fix(bgpspeaker): nat gateway with embedded bgp speaker would crash (#5285)
8583f3ccb tls: specify cipher suites (#5288)
6b0cef8d0 build(deps): bump github.com/go-logr/logr from 1.4.2 to 1.4.3 (#5286)
c43c7a77e fix vlan check conflict and recover it (#5282)
5db981389 base: add CAP_NET_ADMIN to traceroute (#5275)
c8a6597c5 fix port name (#5274)
e75c500ed any vpc can use any external subnet (#5268)
543fd4583 check vlan conflict (#5233)
58bc11094 docs: updated CHANGELOG.md (#5276)
af90ec12c build(deps): bump google.golang.org/grpc from 1.72.1 to 1.72.2 (#5273)
03ec76987 some fixes for vpc egress gateway (#5271)
f88c2df8f base: update ovn patches (#5264)
186ea9be4 feature: traffic policy (#5263)
4f060e2a5 vpc egreess gateway: select workloads by namespace selector and pod selector (#5260)
224d30cc6 chore(vpc-nat-gw): refactor before adding HA gw (#5197)
5645113be Feature/x requirements log permission (#5238) (#5258)
eaee89f48 fix Node access underlay pod failed when applying network policy (#5256)
32310fb7f bump k8s to v1.32.5 (#5251)
3f0edd93c cleanup: delete additional ConfigMaps and RoleBindings in cleanup script (#5255)
33be6d513 fix: put iptables nat prerouting rule right before kube-proxy inserted one (#5232)
f04a58b22 fix handle pod elapsed time (#5250)
073a5d7dd build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1 (#5249)
3bf5b1dd8 Fix fisp arm (#5244)
c4b013d87 Update upgrade-ovs.sh to use POD_NAMESPACE variable for fetching update strategy (#5243)
11b05dc22 fix slbr missing vip when svc is deleted
8413ae0e9 Refactor controller to use EndpointSlices instead of Endpoints
3fede2ae0 Fix fisp arm (#5241)
aa2a32975 Revert "fix arm (#5239)" (#5240)
8bf693d8e fix arm (#5239)
a8a91f2d5 complile openssl 3.5.0 to support fips (#5217)
f2ccacd65 docs: updated CHANGELOG.md (#5236)
86bd74096 vpc egress gateway: set minimum replicas to zero (#5235)
c7365c7d9 build(deps): bump github.com/vishvananda/netlink (#5234)
3ae4be4c2 log show handle pod elapsed time (#5218)
04c6845d0 Deleting a FIP sets the referenced EIP to be ready (#5141)
7fcde6cab simple vip (#5229)
143781ea9 We've seen instances of a VPC being left with a now-deleted subnet on (#5228)
a7a3ef04f build(deps): bump github.com/osrg/gobgp/v3 from 3.36.0 to 3.37.0 (#5231)
f29c6c8d5 ci: fix cilium chaining with underlay networking (#5226)
fb758c7a3 build(deps): bump github.com/Microsoft/hcsshim from 0.12.9 to 0.13.0 (#5225)
a86a25682 bump go to 1.24.3 (#5214)
01e127ccb build(deps): bump golang.org/x/tools from 0.32.0 to 0.33.0 (#5212)
986cfb645 base: use local patch files (#5201)
509ec599e vpc egress gateway: fix invalid route destination (#5202)
8d75e5c3d build(deps): bump golang.org/x/sys from 0.32.0 to 0.33.0 (#5204)
636aebc1a fix (#5200)
e624949db fix nil pointer (#5199)
8aaebc312 build(deps): bump go.uber.org/mock from 0.5.1 to 0.5.2 (#5198)
41cd03166 fix ip clean (#5193)
8f16fc789 fix installation script and chart for dpdk (#5194)
056d7944f some fixes for chart v2 (#5196)
ce2065964 feat(helm): new chart design (#4437)
5ca36a36d feat(helm): new chart design (#4437)
05ac943f4 base: bump cni plugins to v1.7.1 (#5191)
2f288ee10 build(deps): bump github.com/containernetworking/plugins (#5190)
f87a51fb7 Makefile: set major/minor version number for the master branch (#5186)
43c6ee802 fix metallb e2e (#5183)
d105d35f3 docs: updated CHANGELOG.md (#5181)
b6158dae3 bump k8s to v1.32.4 (#5178)
42233288a Makefile: fix installing dev version on talos (#5179)
821234a02 ci: ignore cni-server restarts caused by join network check failure (#5177)
ab3d11ae7 base: update ovn patch (#5175)
6011b90ba fix: clean up garbage lsp (#5172)
05b7d839b build(deps): bump google.golang.org/grpc from 1.71.1 to 1.72.0 (#5171)
8b26247fc docs: updated CHANGELOG.md (#5168)
48db4e499 controller: ensure ovn route policy is reconciled after node is initialized (#5166)
3177e93bd modernize: simplify code by using modern constructs (#5163)
9987f5517 build(deps): bump github.com/docker/docker (#5165)
ad810d6a8 docs: updated CHANGELOG.md (#5164)
449cc932d fix vpc nat gateway to correctly use subnet mapped attachment network (#5158)
262b66867 build(deps): bump github.com/docker/docker (#5160)
91f264e7e support k8s host vm vip type (#5148)
7e584096f pinger: add liveness/readiness probes (#5155)
eb17163bb add dad e2e (#5146)
80382fd1e chart: fix ovs ipsec keys host path (#5137)
3fa839c74 build(deps): bump kernel.org/pub/linux/libs/security/libcap/cap (#5152)
432426cdd ci: add tests for underlay installation on Talos (#5147)
9204d85fd ci: bump golangci-lint to v2.1.1 (#5151)
745615025 ci: fix kvm/libvirt installation (#5150)
8407e834f Add Finalizer to FIP before programming FIP into the VPC NT Gateway (#5142)
6b601709b Support /32 tunnel-source (#5144)
7c8c730d8 ci: add installation test for Talos Linux (#5109)
490ecc037 fix dbus/NetworkManager connection in Talos (#5140)
db40fc449 chart: fix local bin directory host path (#5136)
b39caaccb base: update ovn patches (#5139)
fbe9957c3 build(deps): bump github.com/prometheus/client_golang (#5133)
1cc23652f build(deps): bump go.uber.org/mock from 0.5.0 to 0.5.1 (#5134)
17bd506d7 build(deps): bump github.com/prometheus-community/pro-bing (#5135)
c78348c02 build(deps): bump golang.org/x/tools from v0.31.0 to v0.32.0 (#5130)
93483a59c build(deps): bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 (#5128)
f78099773 build(deps): bump github.com/containernetworking/cni from 1.2.3 to 1.3.0 (#5127)
68c800172 docs: updated CHANGELOG.md (#5123)
645ac944e Introduce Swisscom to USERS.md (#5120)
a38b004b3 gc: consider whether the sts pod is alive during lsp gc (#5122)
ded57da84 build(deps): bump github.com/osrg/gobgp/v3 from 3.35.0 to 3.36.0 (#5121)
26fa3c019 build(deps): bump github.com/onsi/gomega from 1.36.3 to 1.37.0 (#5119)
3fe43f2c0 bump go to 1.24.2 (#5117)
ca13d2894 build(deps): bump google.golang.org/grpc from 1.71.0 to 1.71.1 (#5116)
d55a933a2 ovn lb select the local chassis's backend prefer (#4894)
c3e2307e4 docs: updated CHANGELOG.md (#5113)
0d227994e base: update ovs patches (#5111)
c7a6a71ef e2e: fix kubectl-ko trace test (#5108)
6f88e1915 feat(controller): skip appending VM LSPs if default Multus network is present (#5106)
9fc5197fe build(deps): bump github.com/docker/docker (#5104)
695db1531 build(deps): bump github.com/onsi/gomega from 1.36.2 to 1.36.3 (#5103)
0a6e5e38a build(deps): bump github.com/rs/zerolog from 1.33.0 to 1.34.0 (#5101)
25e392585 build(deps): bump github.com/onsi/ginkgo/v2 from 2.23.2 to 2.23.3 (#5102)
30451fe85 build(deps): bump github.com/docker/docker (#5100)
51067fd2a bump golangci-lint to v2.0.1 (#5097)
af6c3f6ea build(deps): bump gopkg.in/k8snetworkplumbingwg/multus-cni.v4 (#5096)
339df023f build(deps): bump github.com/onsi/ginkgo/v2 from 2.23.1 to 2.23.2 (#5094)
5e624cf18 build(deps): bump github.com/docker/docker (#5092)
7b829a4ce build(deps): bump github.com/onsi/ginkgo/v2 from 2.23.0 to 2.23.1 (#5091)
3310f23dd fix: egress network policy not work, when no pod hit matchlabel (#5089)
c64143504 docs: updated CHANGELOG.md (#5086)
7560a577d build(deps): bump github.com/containerd/containerd from 1.7.26 to 1.7.27 (#5085)
fc14f7959 build(deps): bump aquasecurity/trivy-action from 0.29.0 to 0.30.0 (#5081)
ba9bcece1 bind to pod ips when env variable ENABLE_BIND_LOCAL_IP is set to true (#5049)
6f4100d7f cni-server: check ipv6 dadfailed flag (#5042)
b1c5f2565 [fix] When the Nat-gw pod container restarts unexpectedly, trigger nat-gw statefulset restart to restore the nat-gw pod configuration (#5072)
3f261807e bump kubevirt to v1.5.0 (#5080)
d650cfb6f docs: updated CHANGELOG.md (#5079)
f98582420 bump go to 1.24.1 (#5076)
56b54c7c2 build(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 in /test/anp (#5075)
0f4fde3ba build(deps): bump k8s.io/kubernetes in the k8s-io group (#5074)
7b11e93f9 feat: Improve subnet and VPC finalizer handling (#5071)
58e83ce0f feat: Make Kube-OVN namespace configurable with default value (#5069)
d8a4a0590 build(deps): bump sigs.k8s.io/controller-runtime from 0.20.2 to 0.20.3 (#5067)
c26810950 Fix #5028: Orphaned subnets which reference a non-existent VPC cause new namespaces to never get correct annotations. (#5031)
902d37c6f remove genev_sys_6081 when uninstall kube-ovn (#5066)
b303fa119 add copy of the kubevirt informer from upstream (#5065)
c5f5c5e0c build(deps): bump golang.org/x/tools from 0.30.0 to 0.31.0 (#5059)
bfef0c8a1 build(deps): bump github.com/onsi/ginkgo/v2 from 2.22.2 to 2.23.0 (#5060)
dad4cdfba build(deps): bump golang.org/x/time from 0.10.0 to 0.11.0 (#5054)
bb66e12f1 build(deps): bump golang.org/x/sys from 0.30.0 to 0.31.0 (#5055)
fb2027b28 build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0 (#5053)
08c48a353 build(deps): bump golang.org/x/mod from 0.23.0 to 0.24.0 (#5056)
44a8f2045 build(deps): bump kernel.org/pub/linux/libs/security/libcap/cap (#5052)
7212f8574 build(deps): bump github.com/prometheus/client_golang (#5051)
6dfea7466 simple vip lable update and then update subnet status (#5036)
fae0f6388 build(deps): bump github.com/osrg/gobgp/v3 from 3.34.0 to 3.35.0 (#5047)
599c0c3d3 kubectl-ko: fix conntrack state (#5038)
103ddc6f3 build(deps): bump github.com/containerd/containerd from 1.7.25 to 1.7.26 (#5041)
340c48a1c build(deps): bump github.com/docker/docker (#5033)
4a990cca2 build(deps): bump github.com/emicklei/go-restful/v3 (#5032)
aa4cdbea8 fix rerun the completed vim migration (#5020) (#5026)
94c41b1da bfd: fix bfdd-control setting mintx/minrx (#5021)
4005606ea feat(GC): Add check for GC disabled (#5005)
87feaf5e2 build(deps): bump github.com/containernetworking/plugins from v1.6.0 to v1.6.2 (#5017)
3c0d84902 fix logging in ovn lr/ls gc (#5014)
91b969818 build(deps): bump github.com/prometheus/client_golang (#5016)
a46d69506 docs: updated CHANGELOG.md (#5012)
1cf92b4c2 build(deps): bump azure/setup-helm from 4.2.0 to 4.3.0 (#5011)
7213dc4e3 build(deps): bump github.com/puzpuzpuz/xsync/v3 from 3.5.0 to 3.5.1 (#5001)
c10c6e99a docs: updated CHANGELOG.md (#5000)
a3e4ce730 docs: updated CHANGELOG.md (#4999)
0b45b667a bump k8s to v1.32.2 (#4992)
f9904d26a controller: respect named ports of restartable init containers (#4994)
d4eb19d16 build(deps): bump sigs.k8s.io/controller-runtime from 0.20.1 to 0.20.2 (#4993)
48eec14ea build(deps): bump k8s.io/kubernetes in the k8s-io group (#4990)
b44ea855f bump go to 1.24.0 (#4986)
7a36465e3 iptables: fix subnet metrics rules (#4979)
d7714f991 fix superfluous response.WriteHeader (#4980)
31601001c e2e: skip some test cases for versions prior to v1.14 in cilium chaining (#4988)
f909a3a7d remove twitter account
7d7d2ddfd fix security groups changed when vm is shut down (#4976)
501231a03 bump golang.org/x/tools from v0.29.0 to v0.30.0 (#4983)
89a220693 ci: bump cilium to v1.17.0 (#4982)
0407520b8 e2e: fix ip conflict (#4977)
8beaeab1d Revert "refactor: remove duplicated iptables subnet forward rules (#4860)" (#4978)
242b04b72 refactor: remove duplicated iptables subnet forward rules (#4860)
57b373373 use httpGet as liveness/readiness probe method (#4945)
7f3031366 build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 (#4970)
30e97c7d6 bump github.com/hashicorp/yamux from v0.1.1 to v0.1.2 (#4968)
2a1239ffa controller: consider StatefulSet's start ordinal (#4967)
61ae78798 bump go to 1.23.6 (#4962)
48ea5af47 build(deps): bump golang.org/x/time from 0.9.0 to 0.10.0 (#4958)
f5292fd21 build(deps): bump golang.org/x/sys from 0.29.0 to 0.30.0 (#4959)
497c2e74b build(deps): bump github.com/osrg/gobgp/v3 from 3.33.0 to 3.34.0 (#4956)
209b461ea build(deps): bump github.com/prometheus-community/pro-bing (#4957)
e65a7def2 build(deps): bump github.com/brianvoe/gofakeit/v7 from 7.1.2 to 7.2.1 (#4954)
2074e695e build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6 (#4953)
b92359055 build(deps): bump github.com/evanphx/json-patch/v5 from 5.9.10 to 5.9.11 (#4951)
e5a3c4d6c build(deps): bump github.com/evanphx/json-patch/v5 from 5.9.0 to 5.9.10 (#4949)
b7786ad18 build(deps): bump github.com/golang/glog from 1.2.3 to 1.2.4 (#4950)
a60e21b3d build(deps): bump github.com/puzpuzpuz/xsync/v3 from 3.4.1 to 3.5.0 (#4948)
de7ea70eb build(deps): bump github.com/docker/docker (#4944)
34ece0464 build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4 (#4947)
6c059cef6 build(deps): bump google.golang.org/grpc from 1.69.4 to 1.70.0 (#4946)
29e989c94 build(deps): bump sigs.k8s.io/controller-runtime from 0.20.0 to 0.20.1 (#4943)
903c532ff docs(cloudnull): Add Rackspace as a user (#4941)
ead6e6b4e build(deps): bump github.com/prometheus-community/pro-bing (#4940)
fe30a54cc build(deps): bump helm/chart-releaser-action from 1.6.0 to 1.7.0 (#4938)
2f2b722eb build(deps): bump github.com/puzpuzpuz/xsync/v3 from 3.4.0 to 3.4.1 (#4937)
6b9c9008a ci: build arm64 images on arm64 hosted runners (#4936)
aeecbd4e3 bump go to 1.23.5 (#4935)
e84536bdd controller: fix gateway nodes check (#4912)
5c9058aec build(deps): bump sigs.k8s.io/controller-runtime from 0.19.4 to 0.20.0 (#4932)
c0113468f bump k8s to v1.32.1 (#4930)
773b790dd fix log (#4928)
ccff9b09c make sure gw pod exist before eip creation (#4924)
fba416ade build(deps): bump google.golang.org/protobuf from 1.36.2 to 1.36.3 (#4927)
af6a1b377 [performance] in large-scale clusters, init node router policy too slow (#4895)
756cfd94b build(deps): bump github.com/docker/docker (#4926)
27f0754c5 remove dup func and fix ut (#4921)
4dd28f558 build(deps): bump google.golang.org/grpc from 1.69.2 to 1.69.4 (#4923)
d2608530d controller: check condition NodeNetworkUnavailable when determining whether node is ready (#4917)
f1d91c9bb replace reflect.DeepEqual with slices.Equal and maps.Equal (#4918)
e250afa56 cni-server: set node NetworkUnavailable condition after join subnet gateway check (#4915)
a7fff996b build(deps): bump sigs.k8s.io/controller-runtime from 0.19.3 to 0.19.4 (#4911)
8bb726fb3 e2e: do not check mac annotation for versions prior to v1.13 (#4910)
d5f620510 ipam: check subnet's available ipv6 address count (#4903)
eb3930813 base: bump cni plugins to v1.6.2 (#4904)
672af54db build(deps): bump golang.org/x/tools from 0.28.0 to 0.29.0 (#4905)
bf81d1523 build(deps): bump google.golang.org/protobuf from 1.36.1 to 1.36.2 (#4907)
604413604 Increase code specification and readability in vxlan nic name and qos (#4896)
d66af7ca5 build(deps): bump golang.org/x/time from 0.8.0 to 0.9.0 (#4901)
cbb62ef56 build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0 (#4900)
44fcf08c9 fix: kube-ovn-controller cannot be ready when ENABLE_METRICS is false (#4886)
4d3dd9c7d controller: generate stable annotations for pod routes (#4889)
ed8bea32f e2e: fix duplicate random cidr (#4893)
ac7cf401e build(deps): bump github.com/osrg/gobgp/v3 from 3.32.0 to 3.33.0 (#4891)
3c6eeaf57 build(deps): bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#4890)
48f309cd8 update readme
010b701f8 Support multiple IPPools in the namespace (#4777)
5eb316b03 rename Makefile.e2e to e2e.mk (#4885)
d10251fd7 ipam: use ip provided by nad annotation when providing IPAM for other CNI plugins (#4883)
bad1bdb3b bump go modules used by ANP e2e tests (#4882)
ee6f907be add nodeSelector for lb-svc (#4793)
38df57725 fix golangci-lint (#4880)
c2bc18227 remove unused function (#4877)
9b0072304 should be able to use mac and ip provided by k8s.v1.cni.cncf.io/networks annotation fix e2e version (#4878)
93759b921 pod should use mac and ips provider by multus firstly (#4800)
79acd891d build(deps): bump github.com/onsi/gomega from 1.36.1 to 1.36.2 (#4871)
e04c2480e skip node local dns ip conntrack when set acl (#4825)
9aa076bb4 Add default subnet in custom vpc to the beginning of the list (#4826)
cec47b529 keep dockerfile variable the same as download-go-deps.sh (#4863)
bf5240087 fix(controller/subnet): controller crashes on subnets if gateway is unspecified and netpol are disabled (#4848)
8ecbae8b4 clean up legacy iptables rules only when iptables/ip6_tables is loaded (#4855)
b110300fa build(deps): bump helm/kind-action from 1.11.0 to 1.12.0 (#4868)
454817da3 build(deps): bump google.golang.org/protobuf from 1.36.0 to 1.36.1 (#4869)
3245c91cf build(deps): bump github.com/onsi/ginkgo/v2 from 2.22.0 to 2.22.1 (#4861)
6478007b7 fix: err is always nil (#4857)
3e78b22da deps: bump golang.org/x/net to v0.33.0 (#4851)
87016253a build(deps): bump github.com/docker/docker (#4850)
1caca2c56 fix gateway node check for centralized ecmp subnets (#4847)
0a8adbf4c remove unused function (#4821)
96ad24588 use cache.MetaObjectToName() to get namespaced name (#4842)
a88306ac0 use JSON merge patch to update labels/annotations (#4838)
64acd012c fix getting subnet cidr by protocol (#4844)
4875f23c6 ci: wait for kubevirt crd to be created before creating CR (#4839)
bcf771332 build(deps): bump google.golang.org/protobuf from 1.35.2 to 1.36.0 (#4846)
517f0e488 e2e: add test case for specifying mac address when nad plugin is macvlan (#4836)
9291e1f17 build(deps): bump helm/kind-action from 1.10.0 to 1.11.0 (#4837)
6c109a9ef refactor: remove redundant policy route addition in node handling (#4835)
77650e593 fix some normative issues 24.12.16 (#4833)
ab4824e3a docs: updated CHANGELOG.md (#4832)
b2148a224 docs: updated CHANGELOG.md (#4831)
d8064d85e build(deps): bump google.golang.org/grpc from 1.68.1 to 1.69.0 (#4830)
bd3593da6 api: add scale subresource for vpc-egress-gateway (#4829)
514a2b643 build(deps): bump k8s.io/kubernetes from 1.31.4 to 1.32.0 (#4827)
e2e6dd77c cni: do not exit if the sysctl variable does not exist or can not be set (#4828)
386290793 add anp/banp unittests (#4774)
7006e9cb8 fix(helm): add get on crd for ovn-cr (#4816)
a3d301c00 build(deps): bump github.com/brianvoe/gofakeit/v7 from 7.0.0 to 7.1.2 (#4818)
b5c977863 docs: updated CHANGELOG.md (#4815)
1218d0b20 add some unittests (#4790)
35fcdc1fb bump k8s to v1.31.4 (#4813)
922b5578e build(deps): bump github.com/docker/docker (#4812)
57107d297 build(deps): bump github.com/onsi/gomega from 1.36.0 to 1.36.1 (#4811)
ac81ac29f fix issue 4803: The two names should have a containment relationship (#4807)
bc6379ba5 ci: fix names of artifacts uploaded by vpc egress agteway e2e test (#4799)
1844fe7d4 base: fix underlay network break during upgrade from v1.12 (#4797)
69b727140 build(deps): bump gopkg.in/k8snetworkplumbingwg/multus-cni.v4 (#4806)
322fb8e90 auto detect kubevirt install (#4791)
6b6bf2d8b build(deps): bump google.golang.org/grpc from 1.68.0 to 1.68.1 (#4796)
6016e30c9 build(deps): bump golang.org/x/sys from 0.27.0 to 0.28.0 (#4792)
86ad84bd5 ci: report unittest coverage (#4783)
6ee3b3636 bump go to 1.23.4 (#4781)
f73fbaceb build(deps): bump github.com/osrg/gobgp/v3 from 3.31.0 to 3.32.0 (#4787)
bd0bd0323 build(deps): bump sigs.k8s.io/controller-runtime from 0.19.2 to 0.19.3 (#4788)
e642eef8f ci: bump kubevirt to v1.4.0 (#4782)
e34d5624a feature: VPC Egress Gateway (#4692)
ae0fc894d build(deps): bump kernel.org/pub/linux/libs/security/libcap/cap (#4779)
7b633257b add kubevirt live migration optimize (#4773)
a80490a4e build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#4765)
6df02a803 build(deps): bump github.com/onsi/gomega from 1.35.1 to 1.36.0 (#4766)
5c827f18e docs: updated CHANGELOG.md (#4763)
95ceeffac remove capability SYS_MODULE (#4744)
35f181ba7 add observed generation into condition (#4751)
6c55c613c build(deps): bump k8s from 1.31.2 to 1.31.3 (#4754)
623039c09 ci: add release-1.13 to workflows (#4746)
f6e2a253b build(deps): bump sigs.k8s.io/controller-runtime from 0.19.1 to 0.19.2 (#4757)
be8439cd6 build(deps): bump github.com/prometheus-community/pro-bing (#4758)
06ac37d42 build(deps): bump github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0 (#4755)
c3ae8059a split type definitions into separate files (#4750)
17606a126 build(deps): bump aquasecurity/trivy-action from 0.28.0 to 0.29.0 (#4752)
671ad64f5 add not found err check for lb-svc (#4748)
6e158d6c8 update release script (#4749)
623ab01ba vpc: add support for dedicated BFD LRP (#4717)
bf9bea1e3 docs: updated CHANGELOG.md (#4743)
6481c4a4e update release scripts
3d92364b6 prepare for next release

Contributors

Congqi Zhao
Johann Schley
Karol Szwaj
Kevin Carter
Mengxin Liu
QEDQCD
Robin Lee
SKALA NETWORKS
Zespre Chang
andrewlee1089
bobz965
changluyi
cmdy
coldzerofear
dependabot[bot]
dolibali
github-actions[bot]
hzma
jimyag
netdever
renovate[bot]
xiaoyie
zbb88888
张祖建

Assets 3