Changelog v23.06.3

Changes from v23.06.2 to v23.06.3

  • 90d83eed Set release date for 23.06.3.
  • adcd6be3 controller: Set check_tnl_key for BFD on tunnel ifaces.
  • df0416dd tests: Skip EDNS test if the scapy version doesn’t support it.
  • a4dbe60d northd: Don’t skip the unSNAT stage for traffic towards VIPs.
  • fd6a520d northd: Don’t create fair Sb meters for ACLs with logging disabled.
  • 016aa3ef ci: Update crun in GitHub actions runner.
  • f2c17abd ci: Update crun in Cirrus CI cloud image.
  • c3df9bd0 controller: ofctrl: Use index for meter lookups.
  • 6dd701c4 tests: Fix “router port type update and then …”.
  • 0028d5c9 tests: Fix “ovn-controller - Chassis other_config”.
  • 503c6851 tests: Fix “ofctrl wait before clearing flows”.
  • bd67bb3d tests: Fix flaky “ovn-controller-vtep - binding 1”.
  • 619d2688 tests: Fix flaky “options:requested-chassis …”.
  • 6ce0994c tests: Fix typos in tests.
  • c063a5c3 tests: Have tests fail when adding veth peer fails.
  • 041891ec pinctrl: dns: Ignore additional records.
  • 5e892cc4 ovn-ic: Fix global blacklist filter for IPv6 addresses.
  • ab39e6e5 tests: Fix macro OVN_CHECK_PACKETS_CONTAIN.
  • 9ce933fd features.c: Always wait on the rconn.
  • 384856f5 ci: Bump CirrusCI Ubuntu image version
  • 89af29ee Documentation: Fix broken links in ovn-sandbox.rst.
  • 441811cf ovn-sb.xml: Remove IPv4-only restriction from Service Monitors.
  • a5993b2e github: Update versions of action dependencies (Node.js 20).
  • a32eb73a northd: Remove the protocol match from ECMP symmetric reply flows.
  • 0ef388cf actions: Use random port selection for SNAT with external_port_range.
  • ab00a44c ovn-ic: Handle NB:name updates properly.
  • 5759c8f5 northd: Make sure that affinity flows match on VIP.
  • 39f9abdf Fix segfault due to ssl-ciphers.
  • b7a33c4e controller: fixed potential segfault when changing tunnel_key and deleting ls.
  • 7e812349 northd: Use proper field for lookup_nd
  • 3cc7781e checkpatch.py: Port checkpatch related changes from the OVS repo.
  • c31710eb actions: Make sure affinity learnt flows are auto deleted.
  • 4f496fb8 pinctrl: Directly retrieve desired port_binding MAC.
  • 114f441d test: add dedicated test for garp-max-timeout
  • e6fddafb treewide: Fix small memory leaks reported by static analysis
  • 68187e95 Documentation: Add note about pinning the container after release
  • 7480bde5 ci: Cover more container posibilities
  • 486ace8d ci: Build container image before very job
  • 338b8106 ovs: Bump submodule to include IDL “spurious delete” fix.
  • 3361cf94 Correct ethtype referencing incorrect values
  • bbeec798 Revert “ovn: add geneve PMTUD support”
  • 30728056 northd: forward arp request to lrp snat on.
  • 8fc03119 ovn-macros: Make sure stopped daemons continue before the test ends.
  • 9dd03751 system-test: Fix tcpdump usage in LB template tests.
  • 87b69275 controller: make garp_max_timeout configurable
  • 8c1c376a system-tests: Consolidate wait condition in CoPP test
  • 780a3f0a pinctrl: Fix up comments about sending RST packets for healthcheck.
  • 6e49aad6 ovn: add geneve PMTUD support
  • a1408cc3 fmt_pkt: make sure scapy-server is started once
  • dc9e8236 fmt_pkt: improve scapy-server logging
  • 36d65397 fmt_pkt: use -S check to wait for scapy sock file
  • a4b84d14 fmt_pkt: don’t subshell when calling ovs-appctl
  • a4ace32a controller: fix group_table and meter_table allocation
  • cceb3b2b controller: avoid extra flows if localnet_learn_fdb is disabled
  • 8befadaf controller: FDB entries for localnet should not overwrite entries for vifs
  • daed40cd pinctrl: reset success and failures n_count regardless of svc state
  • 48357351 pinctrl: send RST instead of RST_ACK bit for lb hc
  • e72d882e controller: Don’t artificially limit group and meter IDs to 16bit.
  • 6b44aca5 tests: fixed race_condition with max_prefix
  • 45902292 tests: fixed “ovn-nbctl - daemon retry connection”
  • 0f273fb6 tests: fixed system test “LR with SNAT fragmentation needed for external server”.
  • b2462c4f ovn-ctl man: Add election timer config to manpage
  • 22c4752c controller: have I+P assigning ct_zones for l3gateway ports
  • 1e95d574 tests: fixed another set of flaky ovn-ic tests
  • f0a0c1ec tests: wait for all flows to be installed before sending packets
  • b4d48020 tests: fixed “ipsec – basic configuration”
  • f32db6ac tests: do not start backup-northd by default
  • 0af36846 tests: fixed multiple tests not properly waiting for packets to be received
  • 5f695fb4 ci: Pin Python, Fedora and Ubuntu runner versions.
  • ffa0f6f6 ovs: Bump submodule to include E721 fixes.
  • 7f4f2135 tests: Remove broken “feature inactivity probe” test.
  • 0d8f302e ovs: Bump submodule to v3.1.3.
  • 0cdaf7b4 py-requirements: Remove hacking dependency and use recent flake8.
  • 0c14aa79 ovn-ic: wakeup on ovsdb transaction failures
  • 81da9de8 controller, northd: Wait for cleanup before replying to exit
  • e749e417 tests: Add missing check for scapy.
  • 7526e46e ci: Apply the ASAN workaround only for Clang <16
  • 8d32b64c ci: Use proper uname argument to get the HW type
  • 089f361b tests: Wait for new ovn-controllers to connect to Southbound.
  • 5afe0d65 northd: Avoid snat on reply packets for dgw
  • f984bd17 system-tests: Make sure that IPv6 address is available right away
  • 1fea9770 Don’t mention packet cloning when failing to find tunnel
  • 56c05c43 northd: Allow need frag to be SNATed
  • 684f20ae docs: require ovn-set-local-ip for co-located ovn-controllers
  • f1cd62e0 memory-trim: Fix timestamp overflow warning right after reboot.
  • c7ec8dfa Fix missing flows in ls_in_dhcp_options table
  • 7da71b4a controller: throttle port claim attempts from if-status
  • 46579232 ci: Update apt cache before installing gcc-multilib.
  • ac6f3c75 tests: fixed “send gratuitous ARP for NAT rules on HA distributed router”
  • 0162c8b2 tests: move trim_zeros() to ovn-macros
  • d4b25b40 tests: fixed “L2 Drop and Allow ACL w/ Stateful ACL”
  • 377b59b6 tests: fixed multiple tests missing ovn-nbctl “wait”
  • 372bd46c tests: fixed “options:requested-chassis for logical port”
  • b2e11a80 tests: fixed “Logical router policy packet marking”
  • 651e0476 tests: fixed multiple ovn-ic tests
  • 7b70e07c pinctrl: Reply with correct destination for ICMPv6 RA packets
  • f9f5c6a1 ovn-controller: Add monitor condition for FDB.
  • d67b004d Rename scapy-server into scapy-server.py
  • ec6965af Add ovnkube-identity binary to the ovn-kubernetes Dockerfile
  • 073edbd4 tests: offload scapy transformations to a separate unixctl daemon
  • cc6843f3 Prepare for 23.06.3.