v1.2.0

📢 We are happy to announce the release of OVN-Kubernetes v1.2.0 🎉 🎊 🎆 🎇💥

This version of OVN-Kubernetes uses:
☸️ Kubernetes v1.34.0
🎖️ Libovsdb v0.8.1
🔁 OVN ovn-25.09.2-2.fc42.x86_64
🔄 OVS openvswitch-3.4.1-1.fc42.x86_64

Summary of important changes for this release

This release includes some good features specific to Layer2 UDNs that end-users can leverage:

🌐 Preconfigured Layer2 UserDefinedNetworks offer flexible network configurations for Layer2 type UDN users. This is specially going to be useful for users deploying VMs inside pods. This feature allows users to configure static network configuration when migrating VMs into OVN-Kubernetes Platform. With this release, users can set static selectable IP address, MAC address and default gateway for their layer2 VMs or Pods. This brings us one step closer towards being able to migrate VMs preserving their IP addresses when they are brought into Kubernetes clusters running OVN-Kubernetes as the networking solution. See our okep for more details.

🌐 Improved Layer2 Topology using Transit Routers brought a change in our internal topology for layer2 networks which makes live migration (specially IPV6) and EgressIP on Layer2 much better. See our okep for more details.

🔀 Interconnect mode of deployment was made the default mode in 1.1.0 release. Starting from 1.2.0, we officially announce the deprecation of our legacy central mode of deployment. No new features will be added to the central mode and starting 1.2 release this mode is officially going into maintenance mode and support will be completely withdrawn in future releases.

Besides features, we have merged several bug fixes across different features and many new feature designs are in the pipeline. Please see our OKEPs to know more.

Please reach out to us on CNCF Slack channel ovn-kubernetes if you have any questions and provide feedback based on your experience of using this release so that we can keep improving this project!

New Contributors 💖 💖

• @killianmuldoon made their first contribution in #5556
• @jechen0648 made their first contribution in #5461
• @thom311 made their first contribution in #5131
• @jneo8 made their first contribution in #5559
• @koolzz made their first contribution in #5716
• @pmtk made their first contribution in #5722
• @Meina-rh made their first contribution in #5678
• @mattedallo made their first contribution in #5771
• @zweizeichen made their first contribution in #5815

Special welcome to our new set of contributors into the community 💖 💖

Contributors 💖

Many thanks to all of our contributors who helped make this release happen 😄👏 !! We truly couldn't have done this without all your contributions. Contributors info taken based on this data.

@tssurya @trozet @npinaeva @booxter @jcaamano @kyrtapz @ricky-rav @andreaskaris @martinkennelly @pperiyasamy @RamLavi @pliurh @arkadeepsen @cathy-zhou @ormergi @Meina-rh @qinqon @jluhrsen @maiqueb @adrianchiris @jneo8 @koolzz @killianmuldoon @aserdean @crnithya @arghosh93

Also special thanks to everyone who reported issues and opened tickets against the project. That helps OVN-Kubernetes get better!

Full Changelog: v1.1.0...v1.2.0

v1.1.0

📢 We are happy to announce the release of OVN-Kubernetes v1.1.0 🎉 🎊 🎆 🎇💥
This version of OVN-Kubernetes uses:
☸️ Kubernetes v1.33.3
🎖️ Libovsdb v0.8.1
🔁 OVN ovn-25.03.1-42.fc42.x86_64
🔄 OVS openvswitch-3.4.1-1.fc42.x86_64

Summary of important changes for this release

This release includes many exciting features that end-users can leverage:

🌐 UserDefinedNetworks offer flexible network configurations for users, going beyond the traditional single default network model for all pods within a Kubernetes cluster. This feature addresses the diverse and advanced networking requirements of various applications and use cases. It allows the end users to create isolated networks on a cluster to which they can attach their workloads to. See our user-guide for more details.

🌐 NetworkQoS superceeds EgressQoS feature that was released in 1.0 release. This is an alpha versioned API feature that allows users to leverage DSCP markings to ensure Quality of Service for workloads attached to different networks on your cluster. See our user-guide for more details.

🌐 RouteAdvertisements feature leverages the FRR-K8s CNCF project to allow users to advertise their networks (cluster default network and cluster user defined networks) via BGP to the external world outside the cluster. This let's external clients reach the workloads directly using the podIPs that are advertised to outside. If you want to have an unSNATed experience try out this feature. See our user-guide for more details.

🔀 Interconnect mode of deployment makes OVN-Kubernetes more scalable, performant and secure. Support for this mode of deployment was added as part of 1.0.0 release, however it was not the default. Now, from 1.1 release, we are making this the default deployment mode of OVN-Kubernetes.

Please reach out to us on CNCF Slack channel ovn-kubernetes and provide feedback based on your experience of using this release so that we can keep improving this project!

New Contributors 💖 💖

• @shaneutt made their first contribution in #4588
• @ormergi made their first contribution in #4585
• @RamLavi made their first contribution in #4725
• @fossabot made their first contribution in #4836
• @poroh made their first contribution in #4870
• @FSchumacher made their first contribution in #4945
• @yboaron made their first contribution in #4955
• @TOMOFUMI-KONDO made their first contribution in #5132
• @almusil made their first contribution in #5164
• @thisisobate made their first contribution in #5180
• @aztecher made their first contribution in #5136
• @anuragthehatter made their first contribution in #5248
• @jitseklomp made their first contribution in #5281
• @hedgieinsocks made their first contribution in #5312
• @PGhiorzo made their first contribution in #5323
• @GeorgianaTurcsanyi made their first contribution in #5333
• @booxter made their first contribution in #5382
• @tsebastiani made their first contribution in #5442
• @asood-rh made their first contribution in #5319

Special welcome to our new set of contributors into the community 💖 💖

Contributors 💖

Many thanks to all of our contributors who helped make this release happen 😄👏 !! We truly couldn't have done this without all your contributions. Contributors info taken based on this data.

@tssurya @jcaamano @qinqon @trozet @npinaeva @martinkennelly @maiqueb @dceara @kyrtapz @ormergi @flavio-fernandes @RamLavi @ricky-rav @crnithya @pperiyasamy @oshoval @JacobTanenbaum @danwinship @cathy-zhou @pliurh @arghosh93 @aserdean @jotak @booxter @jluhrsen @arkadeepsen @yboaron @oribon @dave-tucker @girishmg @numansiddique @zeeke @SchSeba @poroh @aztecher @abhat @hareeshpc

Also special thanks to everyone who reported issues and opened tickets against the project. That helps OVN-Kubernetes get better!

Full Changelog: v1.0.0...v1.1.0

This is the beta pre-release of our major upcoming v1.1.0 release.

Full Changelog: v1.0.0...v1.1.0-beta

This is the alpha pre-release of our major upcoming v1.1.0 release.

Full Changelog: v1.0.0...v1.1.0-alpha

v1.0.0

📢 We are happy to announce the release of OVN-Kubernetes v1.0.0, our first major release. 🎉 🎊 🎆 🎇💥
This version of OVN-Kubernetes uses:
☸️ Kubernetes v1.29.2
🔁 OVN ovn-24.03.2-5.fc39.x86_64
🔄 OVS openvswitch-3.2.2-1.fc39.x86_64

Summary of important changes for this release

This release includes many exciting features that end-users can leverage:

🔀 Interconnect mode of deploying OVN-Kubernetes with a distributed database architecture - this makes OVN-Kubernetes more scalable, performant and secure

🌐 EgressIPs which allows users to send northbound traffic from the selected pods using "the special pool of user configured egressIPs"

🔐 EgressFirewall which allows users to impose fine grained traffic security rules on northbound traffic leaving from the selected pods in the cluster

🎯 EgressQoS which performs DSCP markings on pods that can be leveraged to perform traffic shaping and policing

🎖️ EgressService which allows users to send northbound traffic from the selected pods using the load balancer service ingress VIP (reverse of service ingress)

🌐 Multiple External Gateways which allows pods to send egress traffic outside the cluster via a set of defined egress gateway pods

🔐 AdminNetworkPolicy which allows admins to create cluster-wide security policies that limit network traffic based on the principle of least privilege and zero trust

💫 Multihoming which allows plugging multiple interfaces to a Pod with each of the secondary interfaces managed by OVN-Kubernetes CNI

🔐 MultiNetworkPolicy provides an ability to define network policies on the secondary interfaces of the pods

📥 HardwareAcceleration provides an ability to achieve line speed Kubernetes Pod networking - transmit/receive, network policy, NATing, Load Balancers, and so on

🏗️ Kubevirt VM Live Migration allows kubevirt virtual machines to be live migrated while keeping the established TCP connections alive, and preserving the VM IP configuration.

🌉 Hybrid Overlay provides the ability to run both linux and windows nodes on your same cluster

🚇 Tunneling over Multiple NICS provides an ability to tunnel traffic from K8s Pods over different NICs on the same host.

Check out the ovn-kubernetes website for more information. ☸️

Please reach out to us and provide feedback based on your experience of using this release so that we can keep improving this project!

Full Changelog: v0.3.0...release-1.0

Contributors 💖

Many thanks to all of our contributors who helped make this happen 😄👏 !! We truly couldn't have done this without all your contributions. Contributors info taken based on this data.

@girishmg @trozet @dcbw @tssurya @alexanderConstantinescu @npinaeva @jcaamano @martinkennelly @JacobTanenbaum @maiqueb @danwinship @andreaskaris @kyrtapz @flavio-fernandes @astoycos @cathy-zhou @ricky-rav @oribon @fedepaol @shettyg @squeed @dave-tucker @pecameron @ionutbalutoiu @numansiddique @adrianchiris @pperiyasamy @dceara @abhat @aserdean @jordigilh @Pardhakeswar @qinqon @bpickard22 @Billy99 @alinbalutoiu @jluhrsen @vjayaramrh @russellb @pliurh @zshi-redhat @nerdalert @zeeke @as-com @hzhou8 @creydr @roytman @msherif1234 @winsopc @vishnoianil @oshoval @moshe010 @wizhaoredhat @gvbalaji @igsilya @bn222 @shahar-klein @arghosh93 @lanoxx @DmytroLinkin @mccv1r0 @TrevorTaoARM @rcarrillocruz @arkadeepsen @markmc @skitt @vpickard @jotak @masap @dougsland @anfredette @aojea @lmilleri @josecastillolema @sdsen @ganboing @rsevilla87 @stbenjam @amorenoz @haojue @rbbratta @Reamer @krescent @danielmellado @mansikulkarni96 @venuiyer @JocelynBerrendonner @SchSeba @JM1 @hareeshpc @csahithi @dtzhou2

Docker Image Manifests

Our images can be downloaded from the GH Container registry here.

Binaries Released

• ovnkube which is our main single all-in-one binary executable used to launch the ovnkube control plane and data plane pods in a kubernetes deployment
• ovn-k8s-cni-overlay is the cni executable to be placed in /opt/cni/bin (or another directory in which kubernetes will look for the plugin) so that it can be invoked for each pod event by kubernetes
• hybrid-overlay-node is a node controller to integrate disparate networks with VXLAN tunnels
• ovn-kube-util contains the Utils for ovn-kubernetes
• ovndbchecker runs ovn db checker to ensure raft membership and db health on default deployment modes
• ovnkube-trace is the binary that contains ovnkube-trace which is an abstraction used to invoke OVN/OVS packet tracing utils
• ovnkube-identity is the executable that is invoked to run ovn-kubernetes identity manager, which includes the admission webhook and the CertificateSigningRequest approver

v1.0.0-beta

This is the beta pre-release of our major upcoming v1.0.0 release.

Full Changelog: v0.3.0...v1.0.0-beta

Docker Image Manifests

Binaries Released

• ovnkube which is our main single all-in-one binary executable used to launch the ovnkube control plane and data plane pods in a kubernetes deployment
• ovn-k8s-cni-overlay is the cni executable to be placed in /opt/cni/bin (or another directory in which kubernetes will look for the plugin) so that it can be invoked for each pod event by kubernetes
• hybrid-overlay-node
• ovn-kube-util contains the Utils for ovn-kubernetes
• ovndbchecker
• ovnkube-trace is the binary that contains ovnkube-trace which is an abstraction used to invoke OVN/OVS packet tracing utils
• ovnkube-identity is the executable that is invoked to run ovn-kubernetes identity manager, which includes the admission webhook and the CertificateSigningRequest approver

This is the alpha pre-release of our major upcoming v1.0.0 release.

Full Changelog: v0.3.0...v1.0.0-alpha

First release cut for ovn-kubernetes