release: prepare for 1.7.3

CHANGELOG.md

@@ -1,5 +1,32 @@
 # CHANGELOG
 
+## 1.7.3 -- 2021/10/09
+### Performance
+- switch's router port's addresses to "router"
+- do not diagnose external access
+- increase ovn-nb timeout
+
+### Bugfix
+- fix nat-outgoing/policy-routing on pod startup
+- fix variable reference
+- fix e2e testing
+- fix gc lsp statistic for multiple subnet
+- re-check ns annotation to avoid annotations lost
+- append externalIds for pod and node when upgrade
+- fix IPAM for StatefulSet
+- wrong link for iptables
+- fix StatefulSet down scale
+- fix getting LSP UUID by name
+- fix installation scripts
+- init node with wrong ipamkey and lead conflict
+- serialize pod add/delete order
+- kubeclient timeout
+- update base image
+
+### Refactor
+- remove ovn ipam option
+- mute ovn0 ping log and add ping details
+
 ## 1.7.2 -- 2021/09/02
 
 ### Feature

VERSION

@@ -1 +1 @@
-v1.7.2
+v1.7.3

dist/images/generate-ssl-docker.sh

@@ -2,7 +2,7 @@
 set -euo pipefail
 exist=$(kubectl get secret -n kube-system kube-ovn-tls --ignore-not-found)
 if [[ $exist == "" ]];then
-  docker run --rm -v $PWD:/etc/ovn kubeovn/kube-ovn:v1.7.2 bash generate-ssl.sh
+  docker run --rm -v $PWD:/etc/ovn kubeovn/kube-ovn:v1.7.3 bash generate-ssl.sh
   kubectl create secret generic -n kube-system kube-ovn-tls --from-file=cacert=cacert.pem --from-file=cert=ovn-cert.pem --from-file=key=ovn-privkey.pem
   rm -rf cacert.pem ovn-cert.pem ovn-privkey.pem ovn-req.pem
 fi

dist/images/install-pre-1.16.sh

@@ -11,7 +11,7 @@ CNI_CONF_DIR="/etc/cni/net.d"
 CNI_BIN_DIR="/opt/cni/bin"
 
 REGISTRY="kubeovn"
-VERSION="v1.7.2"
+VERSION="v1.7.3"
 IMAGE_PULL_POLICY="IfNotPresent"
 POD_CIDR="10.16.0.0/16"                # Do NOT overlap with NODE/SVC/JOIN CIDR
 POD_GATEWAY="10.16.0.1"

dist/images/install.sh

@@ -14,7 +14,7 @@ CNI_CONF_DIR="/etc/cni/net.d"
 CNI_BIN_DIR="/opt/cni/bin"
 
 REGISTRY="kubeovn"
-VERSION="v1.7.2"
+VERSION="v1.7.3"
 IMAGE_PULL_POLICY="IfNotPresent"
 POD_CIDR="10.16.0.0/16"                # Do NOT overlap with NODE/SVC/JOIN CIDR
 POD_GATEWAY="10.16.0.1"

dist/images/ovn-ic-db-docker.sh

@@ -1 +1 @@
-docker run -d --network=host -v /etc/ovn/:/etc/ovn -v /var/run/ovn:/var/run/ovn -v /var/log/ovn:/var/log/ovn kubeovn/kube-ovn:v1.7.2 bash start-ic-db.sh
+docker run -d --network=host -v /etc/ovn/:/etc/ovn -v /var/run/ovn:/var/run/ovn -v /var/log/ovn:/var/log/ovn kubeovn/kube-ovn:v1.7.3 bash start-ic-db.sh

docs/OpenStackK8sInterconnection.md

@@ -17,7 +17,7 @@ This document is based on Openstack *Victoria* and Kube-OVN *1.7*
 #### 1. Run Interconnection Controller in a Kubernetes node which can be accessed by an Openstack gateway node.
 
 ```shell
-$ docker run --name=ovn-ic-db -d --network=host -v /etc/ovn/:/etc/ovn -v /var/run/ovn:/var/run/ovn -v /var/log/ovn:/var/log/ovn kubeovn/kube-ovn:v1.7.2 bash start-ic-db.sh
+$ docker run --name=ovn-ic-db -d --network=host -v /etc/ovn/:/etc/ovn -v /var/run/ovn:/var/run/ovn -v /var/log/ovn:/var/log/ovn kubeovn/kube-ovn:v1.7.3 bash start-ic-db.sh
 ```
 
 #### 2. Create `ovn-ic-config` for kubernetes cluster in `kube-system` namespace.

docs/cluster-interconnection.md

@@ -13,7 +13,7 @@ only L3 connectivity for gateway nodes is required.
 ## Auto Route Step
 1. Run Interconnection Controller in a region that can be accessed by other cluster
 ```bash
-docker run --name=ovn-ic-db -d --network=host -v /etc/ovn/:/etc/ovn -v /var/run/ovn:/var/run/ovn -v /var/log/ovn:/var/log/ovn kubeovn/kube-ovn:v1.7.2 bash start-ic-db.sh
+docker run --name=ovn-ic-db -d --network=host -v /etc/ovn/:/etc/ovn -v /var/run/ovn:/var/run/ovn -v /var/log/ovn:/var/log/ovn kubeovn/kube-ovn:v1.7.3 bash start-ic-db.sh
 ```
 2. Create `ovn-ic-config` ConfigMap in each cluster `kube-system` namespace. Edit and apply the yaml below in each cluster.
 ```yaml
@@ -85,7 +85,7 @@ For manually adding routes, you need to find the
 ## Manually Route Step
 1. Same as AutoRoute step 1,run Interconnection Controller in a region that can be accessed by other cluster
 ```bash
-docker run --name=ovn-ic-db -d --network=host -v /etc/ovn/:/etc/ovn -v /var/run/ovn:/var/run/ovn -v /var/log/ovn:/var/log/ovn kubeovn/kube-ovn:v1.7.2 bash start-ic-db.sh
+docker run --name=ovn-ic-db -d --network=host -v /etc/ovn/:/etc/ovn -v /var/run/ovn:/var/run/ovn -v /var/log/ovn:/var/log/ovn kubeovn/kube-ovn:v1.7.3 bash start-ic-db.sh
 ```
 2. Create `ic-config` ConfigMap in each cluster. Edit and apply the yaml below in each cluster. Note that `auto-route` is set to `false`
 ```yaml

docs/high-available.md

@@ -8,7 +8,7 @@ Change the replicas to 3, and add NODE_IPS environment var points to node that h
       replicas: 3
       containers:
         - name: ovn-central
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           imagePullPolicy: Always
           env:
             - name: POD_IP

docs/install.md

@@ -41,7 +41,7 @@ If you want to try the latest developing Kube-OVN, try the script below
  JOIN_CIDR="100.64.0.0/16"              # Do NOT overlap with NODE/POD/SVC CIDR
  LABEL="node-role.kubernetes.io/master" # The node label to deploy OVN DB
  IFACE=""                               # The nic to support container network can be a nic name or a group of regex separated by comma, if empty will use the nic that the default route use
- VERSION="v1.7.2"
+ VERSION="v1.7.3"
 ```
 
 After v1.6.0 `IFACE` support regex, e.g. `IFACE=enp6s0f0,eth.*`

docs/vpc.md

@@ -161,4 +161,4 @@ spec:
 ## Custom VPC limitation
 
 - Custom VPC can not access host network
-- Not support DNS/Service/Loadbalancer
+- Not support DNS/Service/Loadbalancer

yamls/kube-ovn-ipv6.yaml

@@ -38,7 +38,7 @@ spec:
       hostNetwork: true
       containers:
         - name: kube-ovn-controller
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           imagePullPolicy: IfNotPresent
           command:
             - /kube-ovn/start-controller.sh
@@ -117,7 +117,7 @@ spec:
       hostPID: true
       initContainers:
         - name: install-cni
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           imagePullPolicy: IfNotPresent
           command: ["/kube-ovn/install-cni.sh"]
           securityContext:
@@ -128,7 +128,7 @@ spec:
               name: cni-bin
       containers:
         - name: cni-server
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           imagePullPolicy: IfNotPresent
           command:
             - bash
@@ -236,7 +236,7 @@ spec:
       hostPID: true
       containers:
         - name: pinger
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           command:
             - /kube-ovn/kube-ovn-pinger
             - --external-address=2400:3200::1

yamls/kube-ovn.yaml

@@ -38,7 +38,7 @@ spec:
       hostNetwork: true
       containers:
         - name: kube-ovn-controller
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           imagePullPolicy: IfNotPresent
           command:
             - /kube-ovn/start-controller.sh
@@ -133,7 +133,7 @@ spec:
       hostPID: true
       initContainers:
         - name: install-cni
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           imagePullPolicy: IfNotPresent
           command: ["/kube-ovn/install-cni.sh"]
           securityContext:
@@ -144,7 +144,7 @@ spec:
               name: cni-bin
       containers:
         - name: cni-server
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           imagePullPolicy: IfNotPresent
           command:
             - bash
@@ -264,7 +264,7 @@ spec:
       hostPID: true
       containers:
         - name: pinger
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           command:
             - /kube-ovn/kube-ovn-pinger
             - --external-address=114.114.114.114
@@ -392,7 +392,7 @@ spec:
       serviceAccountName: ovn
       containers:
         - name: kube-ovn-monitor
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           imagePullPolicy: IfNotPresent
           command: ["/kube-ovn/start-ovn-monitor.sh"]
           securityContext:

yamls/ovn-dpdk.yaml

@@ -194,7 +194,7 @@ spec:
       hostNetwork: true
       containers:
         - name: ovn-central
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           imagePullPolicy: IfNotPresent
           command: ["/kube-ovn/start-db.sh"]
           securityContext:

yamls/ovn-ha.yaml

@@ -209,7 +209,7 @@ spec:
       hostNetwork: true
       containers:
         - name: ovn-central
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           imagePullPolicy: IfNotPresent
           command: ["/kube-ovn/start-db.sh"]
           securityContext:
@@ -332,7 +332,7 @@ spec:
       hostPID: true
       containers:
         - name: openvswitch
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           imagePullPolicy: IfNotPresent
           command: ["/kube-ovn/start-ovs.sh"]
           securityContext:

yamls/ovn.yaml

@@ -226,7 +226,7 @@ spec:
       hostNetwork: true
       containers:
         - name: ovn-central
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           imagePullPolicy: IfNotPresent
           command: ["/kube-ovn/start-db.sh"]
           securityContext:
@@ -354,7 +354,7 @@ spec:
       hostPID: true
       containers:
         - name: openvswitch
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           imagePullPolicy: IfNotPresent
           command: ["/kube-ovn/start-ovs.sh"]
           securityContext:

yamls/speaker.yaml

@@ -29,7 +29,7 @@ spec:
       hostNetwork: true
       containers:
         - name: ovn-central
-          image: "kubeovn/kube-ovn:v1.7.2"
+          image: "kubeovn/kube-ovn:v1.7.3"
           imagePullPolicy: IfNotPresent
           command:
             - /kube-ovn/kube-ovn-speaker