Release Notes

v0.6.8

Bug Fixes

• Fixed Veth interface name generation to avoid name collisions

Documentation

• Added Changelog and Release Notes

v0.6.7

Security Updates

• Fixed CVEs
• Fixed RBAC rules

Chore

• Updated the CI/CD pipeline structure

v0.6.6

Highlights

• Tap and Bridge interfaces are no longer created inside Pods
• IP addresses are now assigned to the Veth interface inside the Pod

Improvements

• Added deploy dependencies for WebhookConfiguration

Security Updates

• Fixed CVEs
• Expanded ClusterAdmin RBAC permissions for NodeNetworkInterfaces

v0.6.5

Chore

• Added mount-points.yaml for CSE with CRI v2 support

v0.6.4

Chore

• Adapted the module build process for Deckhouse Certified Security Edition (CSE)

v0.6.3

Improvements

• Added UID and GID configuration for Tap interfaces

v0.6.2

Highlights

• Denied empty labelSelector.matchLabels in CRD validation

Improvements

• Added Tap interface creation with the correct options for KubeVirt (multi-queue)

v0.6.1

Improvements

• Replaced klog with deckhouse/log
• Refactored the controller structure and logging

Bug Fixes

• Fixed SR-IOV issues
• Added automatic UP of the parent interface for VLANs in the agent
• Fixed minor issues in the agent

Security Updates

• Added the SystemNetworks resource to RBAC roles
• Fixed CVEs

v0.6.0

New Features

• Added eBPF-based DHCP support in the agent

Bug Fixes

• Allowed the control-plane-manager ServiceAccount to use ValidatingAdmissionPolicy for NodeNetworkInterfaces
• Fixed DRA resource compatibility with Kubernetes 1.35

Documentation

• Added an IP address warning for ClusterNetwork of type Access
• Added a hugepages configuration example

v0.5.4

Improvements

• Added the NNI label network.deckhouse.io/interface-name
• Added Ready and IPAddressPool additionalPrinterColumns for ClusterNetwork and Network
• Moved IP address assignment from Tap to Bridge

Bug Fixes

• Fixed IPAddressLease handling for IPAddress resources with OwnerReferences

Security Updates

• Fixed CVEs

v0.5.3

Bug Fixes

• Fixed ClusterNetwork behavior for the Access type

v0.5.2

Security Updates

• Fixed CVEs

Chore

• Fixed module.yaml import in werf for CI

v0.5.1

New Features

• Added SystemNetwork support on top of bond interfaces
• Added the ClusterIPAddressLease resource for ClusterIPAddress

v0.5.0

New Features

• Added SystemNetwork functionality

Improvements

• Added periodic restoration of a missing CNI conflist in the agent
• Added unix socket connection retries and improved logging in the CNI plugin
• Updated the golang-alpine base image to 1.25

v0.4.2

Security Updates

• Added RBAC rules for SDN resources

v0.4.1

Improvements

• Added validation for NetworkClass spec.vlan.idPool

Bug Fixes

• Fixed VLAN allocation for Network resources in the controller
• Fixed an NNI cache lookup error in the agent

Documentation

• Added Russian translations for the Network and ClusterNetwork CRD descriptions

v0.4.0

New Features

• Added IPAM functionality for IP address management

Documentation

• Added IPAM documentation
• Reviewed and refactored documentation

Chore

• Added E2E tests for IPAM
• Added a Makefile and fixed Go lint issues

v0.3.0

New Features

• Added the UnderlayNetwork CRD and controller
• Added SR-IOV support and passthrough of physical network devices into Pods via the DRA plugin and the UnderlayNetwork resource

Improvements

• Automated AdmissionWebhook TLS certificate provisioning via Deckhouse hooks
• Set VPA updateMode to InPlaceOrRecreate

Bug Fixes

• Created bond interfaces are now automatically brought UP

Security Updates

• Fixed CVEs

Documentation

• Added UnderlayNetwork configuration documentation

Chore

• Added E2E tests for bond interfaces

v0.2.0

Highlights

• Allowed bond interfaces when creating networks
• Renamed Vlan to VLAN in CRDs and updated resource descriptions

Improvements

• Mounted the containerd directory in the agent and detect permanent MAC addresses via ethtool
• Optimized the controller cache and added pprof support

Bug Fixes

• Fixed bond metadata handling in the controller and agent
• Fixed garbage collection for NodeNetworkInterface resources
• Fixed disabling an interface that already has an IP address assigned

Documentation

• Updated module documentation

Chore

• Removed E2E logic from the module and moved it to the shared pipeline
• Removed the unused main network mode
• Updated CI and the module description

v0.1.0

Highlights

• Released the first version of the SDN module with basic network management capabilities

Dependencies

• Raised the minimum supported Deckhouse version to 1.72