v1.7.9

What's Changed

Features

• Retrieve HPC CIDRs from metadata.

BugFix and Enhancement

• Ignore pod-networks annotations in the Cello agent's VPC ENI handling.
• Disable Cilium CNP status updates by default.
• Update the chart for v1.7.9.

Full Changelog: release-v1.7.8...release-v1.7.9

Container Image

docker pull cr-norm-cn-beijing.cr.volces.com/cello/cello:v1.7.9

Platform: linux/amd64. The alias release-v1.7.9 points to the same image. Built natively on amd64 with -trimpath, the repository runtime packaging and the Cilium patches from this tag.

Mirror:

docker pull cni-cn-beijing.cr.volces.com/cello/images:v1.7.9

v1.7.8

What's Changed

Features

• Filter ENIs locally by tags and support multiple tag prefixes.
• Load credentials from a secret file.
• Support RHEL distributions with a 4.18 kernel and configurable ipvlan CNI flags.

BugFix

• Render valid Cello configuration JSON for ENI tag settings.
• Fix metadata credential request timeouts and update credential mount paths and logging.
• Fix device-plugin reporting after kubelet restarts and blocking gRPC registration.

Enhancement

• Adjust Cilium sysctl settings when higher values are required.

Full Changelog: release-v1.7.7...release-v1.7.8

Container Image

docker pull cr-norm-cn-beijing.cr.volces.com/cello/cello:v1.7.8

Platform: linux/amd64. The alias release-v1.7.8 points to the same image. Built natively on amd64 with -trimpath, the repository runtime packaging and the Cilium patches from this tag.

Mirror:

docker pull cni-cn-beijing.cr.volces.com/cello/images:v1.7.8

v1.7.7

What's Changed

Features

• Support daemon-managed workloads without a Kubernetes Pod.
• Use protobuf as the default Kubernetes client content type.

BugFix

• Fix allocation of invalid network resources in single-stack configurations.
• Improve VLAN creation error messages.

Build

• Fix multi-platform image builds.
• Restore the open-source runtime/Hubble image stages and the missing iptables wrapper installer.

Full Changelog: release-v1.7.6...release-v1.7.7

Container Image

docker pull cr-norm-cn-beijing.cr.volces.com/cello/cello:v1.7.7

Platform: linux/amd64. The alias release-v1.7.7 points to the same image. Built natively on amd64 with -trimpath, the repository runtime packaging and the Cilium patches from this tag.

Mirror:

docker pull cni-cn-beijing.cr.volces.com/cello/images:v1.7.7

v1.7.6

What's Changed

Features

• Add the lightweight Cello daemon and j5-cni, with Cello-lite/meta-CNI support for Calico.
• Add dynamic IPAM detection during CNI ADD.
• Add aggregated ENI metadata queries.
• Support disabling pod subnets and reclaiming associated resources through node configuration.

BugFix and Enhancement

• Remove stale gRPC socket files before listening.
• Handle empty secondary-IP metadata correctly.
• Optimize concurrent IPv4/IPv6 address assignment and removal, and remove an unnecessary ENI-IP lock.
• Expand pool and configuration unit tests.

Full Changelog: release-v1.7.5...release-v1.7.6

Container Image

docker pull cr-norm-cn-beijing.cr.volces.com/cello/cello:v1.7.6

Platform: linux/amd64. The alias release-v1.7.6 points to the same image. Built natively on amd64 with -trimpath, the repository runtime packaging and the Cilium patches from this tag.

Mirror:

docker pull cni-cn-beijing.cr.volces.com/cello/images:v1.7.6

v1.7.5

What's Changed

Features

• Support host-namespace-only socket load balancing.

BugFix

• Pass CGROUP_ATTACH_FLAGS to bpftool when attaching cgroup programs.
• Fix Cilium ipcache and identity garbage collection, and include the embedded Cilium operator in the image.
• Fix non-RDMA devices being recognized as RDMA with mlnxcx6_offload.
• Improve ECS OpenAPI compatibility and metrics behavior in large clusters while retaining compatible metric names.

Full Changelog: release-v1.7.4...release-v1.7.5

Container Image

docker pull cr-norm-cn-beijing.cr.volces.com/cello/cello:v1.7.5

Platform: linux/amd64. The alias release-v1.7.5 points to the same image. Built natively on amd64 with -trimpath, the repository runtime packaging and the Cilium patches from this tag.

Mirror:

docker pull cni-cn-beijing.cr.volces.com/cello/images:v1.7.5

v1.7.4

What's Changed

Features

• Support multiple HPC routes and RDMA devices without a network interface.
• Support a custom site prefix for BytePlus resources.

BugFix

• Fix event recorder registration.
• Validate the start and end of configured CIDR IPAM ranges.

Tests

• Add tests for ENI tags and event recording.

Full Changelog: release-v1.7.3...release-v1.7.4

Container Image

docker pull cr-norm-cn-beijing.cr.volces.com/cello/cello:v1.7.4

Platform: linux/amd64. The alias release-v1.7.4 points to the same image. Built natively on amd64 with -trimpath, the repository runtime packaging and the Cilium patches from this tag.

Mirror:

docker pull cni-cn-beijing.cr.volces.com/cello/images:v1.7.4

v1.7.3

What's Changed

Features

• Allow selecting the project for VPC resources through node labels.
• Add user-agent information to metadata requests and specify the CNI version for service-chain metadata CNI.

BugFix

• Fix a channel deadlock when ENI initialization fails.
• Fix RDMA CNI selecting the wrong IPAM type.

Enhancement

• Make configuration globally accessible and simplify EC2 metrics handling.

Full Changelog: release-v1.7.2...release-v1.7.3

Container Image

docker pull cr-norm-cn-beijing.cr.volces.com/cello/cello:v1.7.3

Platform: linux/amd64. The alias release-v1.7.3 points to the same image. Built natively on amd64 with -trimpath, the repository runtime packaging and the Cilium patches from this tag.

Mirror:

docker pull cni-cn-beijing.cr.volces.com/cello/images:v1.7.3

v1.7.2

What's Changed

BugFix

• Stop looking up the existing Cello ConfigMap during Helm upgrades.
• Serialize credentials and IAM role fields as valid JSON in the Helm chart.
• Fix missing extra routes and bpffs mount checks.

Build

• Optimize image building and update version metadata to v1.7.2.

Full Changelog: release-v1.7.1...release-v1.7.2

Container Image

docker pull cr-norm-cn-beijing.cr.volces.com/cello/cello:v1.7.2

Platform: linux/amd64. The alias release-v1.7.2 points to the same image. Built natively on amd64 with -trimpath, the repository runtime packaging and the Cilium patches from this tag.

Mirror:

docker pull cni-cn-beijing.cr.volces.com/cello/images:v1.7.2

v1.7.10

What's Changed

Features

• Support configurable TOP service endpoints and disabling SSL for TOP requests.
• Support excluding vePFS RDMA NICs.

BugFix and Enhancement

• Use TryLock when pausing garbage collection to avoid blocking readers.
• Release resources in batches for greater efficiency.
• Validate HPC routes returned by metadata.
• Stop using metadata to verify OpenAPI results.
• Update the chart for v1.7.10.

Full Changelog: release-v1.7.9...release-v1.7.10

Container Image

docker pull cr-norm-cn-beijing.cr.volces.com/cello/cello:v1.7.10

Platform: linux/amd64. The alias release-v1.7.10 points to the same image. Built natively on amd64 with -trimpath, the repository runtime packaging and the Cilium patches from this tag.

Mirror:

docker pull cni-cn-beijing.cr.volces.com/cello/images:v1.7.10

v1.7.1

What's Changed

Features

• Add HPC topology updates and pod metadata recording.
• Include the node name in the API user agent.

BugFix

• Fix VLAN device packet-rate handling, configured ENI quotas, and trunk enablement.
• Fix pool tests and add pod metadata unit tests.

Build

• Disable CGO for statically linked CNI plugins.

Full Changelog: release-v1.7.0...release-v1.7.1

Container Image

docker pull cr-norm-cn-beijing.cr.volces.com/cello/cello:v1.7.1

Platform: linux/amd64. The alias release-v1.7.1 points to the same image. Built natively on amd64 with -trimpath, the repository runtime packaging and the Cilium patches from this tag.

Build adaptation: the image additionally applies the launcher bpffs build fix from commit 50aeccaf to resolve compilation errors in this historical tag. Build provenance is included at /usr/share/cello/build-provenance.json.

Mirror:

docker pull cni-cn-beijing.cr.volces.com/cello/images:v1.7.1