Releases: containernetworking/plugins
Releases · containernetworking/plugins
v1.6.1: portmap: fix iptables conditions detection
As show in the docs, iptables conditions can also start with '!' Fixes 01a94e17c77e6ff8e5019e15c42d8d92cf87194f Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
v1.6.1: portmap: fix iptables conditions detection
As show in the docs, iptables conditions can also start with '!' Fixes 01a94e17c77e6ff8e5019e15c42d8d92cf87194f Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
CNI plugins v1.6.0
This is the v1.6.0 release of the CNI community plugins.
Changelog
Important
- revert htb changes due to ongoing issues and missing maintainer by @h0nIg in #1105. This reverts the (undocumented) feature added in v1.5 where traffic from a specific CIDR would be exempted from bandwidth shaping. Unfortunately the implementation was lacking. We hope to re-add this feature in the future.
New features
- nftables support for ipmasq and portmap by @danwinship in #935
- dhcp: Add priority option to dhcp. by @lisongmin in #1091
CNI v1.1 support
- Use of Scope for routes in IPAM by @LionelJouin in #1087
- Pass status along ipam update by @LionelJouin in #1082
Other improvements
- macvlan: add bcqueuelen setting by @champtar in #1074
- SBR: option to pass the table id by @LionelJouin in #1088
- host-device: use temp network namespace for rename by @champtar in #1073
Fixes
- Fix unnecessary retrying when the link is down in dhcp by @lisongmin in #1076
- Fix inadvertent txqueuelen being set to zero by @gudmundur in #1100
- VRF: Wait for the local/host routes to be added by @LionelJouin in #1104
- fix(dhcp): can not renew an ip address by @lisongmin in #1092
Misc / CI
- Change chown to change current dir as well by @s1061123 in #1058
- ci, go.mod: bump to go 1.23 by @squeed in #1094
- Ignore link-local routes in SBR tests by @LionelJouin in #1102
New Contributors
- @lisongmin made their first contribution in #1076
- @LionelJouin made their first contribution in #1088
- @gudmundur made their first contribution in #1100
- @h0nIg made their first contribution in #1105
Full Changelog: v1.5.1...v1.6.0
Contributors
gudmundur, danwinship, and 6 other contributors
Assets 26
v1.5.1
What's Changed
Full Changelog: v1.5.0...v1.5.1
Contributors
s1061123
Assets 26
CNI Plugins v1.5.0
What's Changed
New Features:
- Support DeviceID on Auxiliary Bus by @adrianchiris in #1003
- Dev/exclude subnets from traffic shaping by @oOraph in #921
Fixes:
- Fix release script in github action by @s1061123 in #1037.
- Use temporary name for netdevice when moving in/out of NS by @adrianchiris in #1002
New Contributors
- @oOraph made their first contribution in #921
- @samuelkarp made their first contribution in #1029
- @testwill made their first contribution in #1034
Full Changelog: v1.4.1...v1.5.0
Contributors
s1061123, samuelkarp, and 3 other contributors
Assets 26
v1.4.1
Merge pull request #991 from containernetworking/dependabot/docker/do…
CNI Plugins v1.4.0
New features:
- (#832). tap: allow for a tap device to be created as a bridge port
- (#914). [tuning] add ability to set tx queue len
Improvements:
- (#969). Add CNI_NETNS_OVERRIDE
- (#979). Add ndisc_notify in ipvlan for ipv6 ndp
- (#974). macvlan: enable ipv6 ndisc_notify
- (#950). Create IPAM files with 0600 permissions
- (#924). More efficient iptables usage.
- (#902). spoofcheck: Make use of go-nft's ApplyConfigEcho(). This is much faster
- (#874). Add routes propagation for VRF plugin
Build:
Bug fixes:
CNI Plugins v1.3.0
This release introduces a new plugin: tap. Thanks to @mmirecki for contributing this
New features:
- (#784). tap: This PR adds a plugin to create tap devices.
- (#829). bridge: add vlan trunk support
- (#875). bridge: Add parameter to disable default vlan
- (#814). macvlan: Add support for in-container master
- (#813). ipvlan: Add support for in-container master
- (#781). vlan: Add support for in-container master
Improvements:
- (#880). bridge: read only required chain on cni del instead of the entire ruleset
- (#873). bridge, spoof check: remove drop rule index
Bug fixes:
Contributors
mmirecki
Assets 34
CNI Plugins v1.2.0
Changelog:
New plugins & features
- (#743). dummy: Create a Dummy CNI plugin that creates a virtual interface
- (#725). V2 API support for win-overlay CNI
- (#693). tuning Add sysctl allowList
Bug fixes
- (#809). bridge: refresh host-veth mac after port add
- (#802). Add IPv6 support for AddDefaultRoute
- (#779). Fix path substitution to enable setting sysctls on vlan interfaces
- (#782). host-local: fix bug on getting NextIP of addresses with first byte
- (#709). dhcp: Fix client id in renew/release
Improvements & Cleanups:
- (#772). portmap support masquerade all
- (#733). bridge: support IPAM DNS settings
- (#702). bridge: call ipam.ExecDel after clean up device in netns #702
- (#768). dhcp: Cleanup Socket and Pidfile on exit
- (#792). dhcp: Update Allocate method to reuse lease if present
- (#755). dhcp: Use the same options for acquiring, renewing lease
- (#730). tuning Check for duplicated sysctl keys
- (#739). build: support riscv64
- (#712). bug: return errors when iptables and ip6tables are unusable
- (#719). Make description for
staticplugin more exact
As always, many thanks to our contributors.
CNI plugins v1.1.1
Plugins release v1.1.1
This is a patch release that fixes the following bugs in v1.1.0:
- #702 bridge: call ipam.ExecDel after clean up device in netns
- #709 ipam/dhcp: Fix client id in renew/release
v1.1.0 Changelog:
One minor-but-major change is that we no longer wait for IPv6 Duplicate
Address Detection to complete. This reduces execution time by 2 seconds.
New features:
- firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker (#584)
- dhcp ipam: support customizing dhcp options from CNI args (#670)
- Allow setting sysctls on a particular interface (#669)
- bridge: Add macspoofchk support (#639).
Bug fixes:
- portmap: fix bug that new udp connection deletes all existing conntrack entries (#705)
- portmap: fix checkPorts result when chain does not exist (#707)
- dhcp: fixed DHCP problem that broke when fast retry was added (#681)
- ipvlan: Send Gratuitous ARP after IPs are set (#675)
Improvements
- host-device: Bring interfaces up after moving into container (#679)
- Explicitly Disable Duplicate Address Detection For Container Side Veth (#695)
- Replace arping package with arp_notify (#687)
- host-device: add ipam support for dpdk device (#642)