- Decrease log verbosity value for antrea-agent specified in the Windows manifest for containerd from 4 to 0. (#4676, @XinShuYang)
- Ensure cni folders are created when starting antrea-agent with containerd on Windows. (#4685, @XinShuYang)
- Document the limit of maximum receiver group number on a Linux Node for multicast. (#4850, @ceclinux)
- Update Open vSwitch to 2.17.6 (#4959, @tnqn)
- Bump up whereabouts to v0.6.1. (#4988, @hjiajing)
- Ensure NO_FLOOD is always set for IPsec tunnel ports and TrafficControl ports. (#4419 #4654 #4674, @xliuxu @tnqn)
- Fix Service routes being deleted on Agent startup on Windows. (#4470, @hongliangl)
- Fix route deletion for Service ClusterIP and LoadBalancerIP when AntreaProxy is enabled. (#4711, @tnqn)
- Fix OpenFlow Group being reused with wrong type because groupDb cache was not cleaned up. (#4592, @ceclinux)
- Fix antctl not being able to talk with GCP kube-apiserver due to missing platforms specific imports. (#4494, @luolanzone)
- Fix Agent crash in dual-stack clusters when any Node is not configured with an IP address for each address family. (#4480, @hongliangl)
- Fix Service not being updated correctly when stickyMaxAgeSeconds or InternalTrafficPolicy is updated. (#4845, @tnqn)
- Fix the Antrea Agent crash issue when large amount of multicast receivers with different multicast IPs on one Node start together. (#4870, @ceclinux)
- Fix the Antrea Agent crash issue which is caused by a concurrency bug in Multicast feature with encap mode. (#4903, @ceclinux)
- Fix the Antrea Agent crash issue on Windows by running modules that rely on Services after AntreaProxy is ready. (#4946, @tnqn)
- Make FQDN NetworkPolicy work for upper case DNS. (#4934, @GraysonWu)
- Fix a bug that a deleted NetworkPolicy is still enforced when a new NetworkPolicy with the same name exists. (#4986, @tnqn)
- Fix a race condition between stale controller and ResourceImport reconcilers in Antrea Multi-cluster controller. (#4853, @Dyanngg)
- Recover ovsdb-server and ovs-vswitched service if they do not exist when running the Windows cleanup script. (#4722, @wenyingd)
- Add L7NetworkPolicy feature which enables users to protect their applications by specifying how they are allowed to communicate with others, taking into account application context. (#4380 #4406 #4410, @hongliangl @qiyueyao @tnqn)
- Layer 7 NetworkPolicy can be configured through the
l7Protocols
field of Antrea-native policies. - Refer to this document for more information about this feature.
- Layer 7 NetworkPolicy can be configured through the
- Add SupportBundleCollection feature which enables a CRD API for Antrea to collect support bundle files on any K8s Node or ExternalNode, and upload to a user-defined file server. (#4184 #4338 #4249, @wenyingd @mengdie-song @ceclinux)
- Refer to this document for more information about this feature.
- Add support for NetworkPolicy for cross-cluster traffic. (#4432 #3914, @Dyanngg @GraysonWu)
- Setting
scope
of an ingress peer toclusterSet
expands the scope of thepodSelector
ornamespaceSelector
to the entire ClusterSet. - Setting
scope
oftoServices
toclusterSet
selects a Multi-cluster Service. (#4397, @Dyanngg) - Refer to this document for more information about this feature.
- Setting
- Add the following capabilities to the ExternalNode feature:
- Containerized option for antrea-agent installation on Linux VMs. (#4413, @Nithish555)
- Support for RHEL 8.4. (#4323, @Nithish555)
- Add support for running antrea-agent as DaemonSet when using containerd as the runtime on Windows. (#4279, @XinShuYang)
- Add documentation for Antrea Multicast. (#4339, @ceclinux)
- Extend
antctl mc get joinconfig
to print member token Secret. (#4363, @jianjuns) - Improve support for Egress in Traceflow. (#3926, @Atish-iaf)
- Add NodePortLocalPortRange field for AntreaAgentInfo. (#4379, @wenqiq)
- Use format "namespace/name" as the key for ExternalNode span calculation. (#4401, @wenyingd)
- Enclose Pod labels with single quotes when uploading CSV record to S3 in the FlowAggregator. (#4334, @dreamtalen)
- Upgrade Antrea base image to ubuntu 22.04. (#4459 #4499, @antoninbas)
- Update OVS to 2.17.3. (#4402, @mnaser)
- Reduce confusion caused by transient error encountered when creating static Tiers. (#4414, @tnqn)
- Add a periodic job to rejoin dead Nodes, to fix Egress not working properly after long network downtime. (#4491, @tnqn)
- Fix potential deadlocks and memory leaks of memberlist maintenance in large-scale clusters. (#4469, @wenyingd)
- Fix connectivity issues caused by MAC address changes with systemd v242 and later. (#4428, @wenyingd)
- Fix error handling when S3Uploader partially succeeds. (#4433, @heanlan)
- Fix a ClusterInfo export bug when Multi-cluster Gateway changes. (#4412, @luolanzone)
- Fix OpenFlow rules not being updated when Multi-cluster Gateway updates. (#4388, @luolanzone)
- Delete Pod specific VF resource cache when a Pod gets deleted. (#4285, @arunvelayutham)
- Fix OpenAPI descriptions for AntreaAgentInfo and AntreaControllerInfo. (#4390, @tnqn)