-
Notifications
You must be signed in to change notification settings - Fork 1.3k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
3388bd1
commit a0e9290
Showing
2 changed files
with
48 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,19 @@ | ||
19 Jul 2022 | ||
|
||
#### Bug fixes | ||
|
||
|
||
- Update UBI base image to 8.6 [calico #6349](https://github.com/projectcalico/calico/pull/6349) (@caseydavenport) | ||
- Update pacakges from UBI repo for CVE fixes [calico #6389](https://github.com/projectcalico/calico/pull/6389) (@caseydavenport) | ||
- Fix a bug where the check for treating the 240/4 CIDR like RFC 1918 ranges caught the broadcast address 255.255.255.255 [calico #6389](https://github.com/projectcalico/calico/pull/6389) (@caseydavenport) | ||
- Fix race condition in BIRD that could potentially cause missed config updates [calico #6389](https://github.com/projectcalico/calico/pull/6389) (@caseydavenport) | ||
- Increase timeout when deleting workloads veth device in order to avoid false positives under heavy load. [calico #6365](https://github.com/projectcalico/calico/pull/6365) (@caseydavenport) | ||
- Fix lookups of locally defined hostnames from within Calico containers due to missing nsswitch.conf [calico #6334](https://github.com/projectcalico/calico/pull/6334) (@caseydavenport) | ||
- Update the ipset package from 7.1 to 7.11 for ARM builds [calico #6263](https://github.com/projectcalico/calico/pull/6263) (@ScOut3R) | ||
- eBPF: Move mount of BPFfs and cgroupv2 to a dedicated init container with elevated privileges; enter the root cgroup namespace to mount cgroupv2 in order to allow the CTLB to be installed system-wide. Reduce the mount privileges of the main calico-node container. [calico #6248](https://github.com/projectcalico/calico/pull/6248) (@mazdakn) | ||
- Fix IP address truncation when using autodetection method "k8s-internal-ip" [calico #6233](https://github.com/projectcalico/calico/pull/6233) (@Josh-Tigera) | ||
- Fix issue with eBPF verifier rejecting some programs. [calico #6220](https://github.com/projectcalico/calico/pull/6220) (@tomastigera) | ||
- Handle errors correctly in wireguard tunnel IP setting on the node [calico #6212](https://github.com/projectcalico/calico/pull/6212) (@robbrockbank) | ||
- When there is no allocated Wireguard interface IP and host encryption is enabled the host IP is used as the device IP. This ensures source IP selection will choose the correct host IP when routing over Wireguard [calico #6212](https://github.com/projectcalico/calico/pull/6212) (@robbrockbank) | ||
- Fix that a combination of node deletions and workload IP relocation previously could result in multiple nodes having the same CIDR. [calico #6212](https://github.com/projectcalico/calico/pull/6212) (@robbrockbank) | ||
- Don't allocate wireguard device IPs for managed cloud non-calico CNI [calico #6212](https://github.com/projectcalico/calico/pull/6212) (@robbrockbank) |