Bump antrea.io/antrea from 1.11.1 to 1.12.1

[dependabot]

Bumps antrea.io/antrea from 1.11.1 to 1.12.1.

Release notes

Sourced from antrea.io/antrea's releases.

Release v1.12.1

Fixed

• Bump up libOpenflow and ofnet versions to fix a PacketIn2 response parse error. (#5154, @​wenyingd)
• Fix incorrect FlowMod message passing in the modifyFlows function of the OpenFlow client to avoid unexpected flow error. (#5125, @​Dyanngg)
• Ensure the Egress IP is always correctly advertised to the network, including when the userspace ARP responder is not running or when the Egress IP is temporarily claimed by multiple Nodes. (#5127, @​tnqn)
• Fix ClusterClaim webhook bug to avoid ClusterClaim deletion failure. (#5075, @​luolanzone)
• Fix an issue in ANP with FQDN rules where TCP src port is unset on the TCP DNS response flow. (#5078, @​wenyingd)
• Fix status report when no-op changes are applied to Antrea-native policies. (#5096, @​tnqn)
• Fix IPv4 groups containing IPv6 endpoints mistakenly in dual-stack clusters in AntreaProxy implementation. (#5194, @​tnqn)

Release v1.12.0

The Multicast, TopologyAwareHints, and NodeIPAM features are graduated from Alpha to Beta. The TopologyAwareHints, NodeIPAM features are enabled by default. Multicast can be enabled with a new Antrea Agent configuration parameter: multicast.enable.

Added

• Add two new fields sourcePort and sourceEndPort in Antrea-native policy API to match traffic initiated from specific ports. (#4687, @​Dyanngg)
• Add a new field logLabel to Antrea-native policy CRDs; the user-provided label is added to audit logs. (#4748, [@​qiyueyao])
• Add Antrea Controller API for querying Antrea Groups and ClusterGroups by IP addresses. (#4807, @​Dyanngg)
• Add a new Antrea Controller configuration clientCAFile to allow user to specify client CA. (#4664, @​wenyingd)
• Add support for ExternalIP in AntreaProxy to allow a Service to be accessed from outside the cluster using an external IP address. (#4866, [@​hongliangl])
• Add WireGuard tunnel mode for Antrea Multi-cluster to support encryption of the traffic between member clusters. (#4737 #4606 #4848, [@​hjiajing])
  • Refer to Antrea Multi-cluster user guide for more informantion about this feature.
• Add support for EndpointSlice API for Multi-cluster Services. When the EndpointSlice API is available for the cluster, EndpointSlice resources of the exported Service, rather than the Endpoints resource, will be processed. (#4895, @​luolanzone)
• Add a new exporter to FlowAggregator to write flows to a local file. (#4855, [@​antoninbas])
• Add openEuler 22.03 as a new supported OS of Antrea, and update the Kubernetes installer document with the information. (#4957, [@​ceclinux])

Changed

• Deprecate Antrea Octant Plugin; it is replaced by a dedicated Antrea UI. (#4825, [@​antoninbas])
• Update Open vSwitch version to 2.17.6. (#4959, @​tnqn)
• Update Windows OVS version to 2.16.7. (#4705, [@​XinShuYang])
• Add status.egressIP field for Egress to represent the effective Egress IP. (#4603, @​tnqn)
• Add a new Failed phase in ANP status for the case when all Agents have reported the status and at least one failure is received. (#4608, @​wenyingd)
• Check the existence of AntreaAgentInfo CRD before operating on it for worker Node or ExternalNode. (#4762, @​wenyingd)
• Stop serving v1alpha2 version of the ClusterGroup CRD. (#4812, [@​antoninbas])
• Optimize the cached flows in Antrea Agent to reduce Agent memory usage. (#4495, @​wenyingd)
• Replace PacketIn/Controller with PacketIn2/Controller2 to improve packetin handler. (#4768, [@​GraysonWu])
• Change to look up Pods by name instead of IP address to fetch labels in Flow Aggregator, to avoid obtaining incorrect Pods when Pod turnover is high. (#4942, [@​dreamtalen])
• Do not export Services of type ExternalName in Antrea Multi-cluster; this is consistent with the upstream Multi-cluster Service KEP. (#4814, @​luolanzone)
• Update Multi-cluster user guide to provide more details for Gateway enablement. (#4889, @​luolanzone)
• Update documentation for recent MetalLB versions. (#4803, [@​antoninbas])
• Add support for short-circuiting in AntreaProxy to ensure that the traffic from Pod/Node clients to external addresses behaves the same way as the traffic from external clients to external addresses. (#4815, [@​hongliangl])
• Add OVS table name as label for ovs_flow_count Prometheus metrics. (#4893, [@​cr7258])

... (truncated)

Commits

• 563001b Set VERSION to v1.12.1
• ffa44e0 Update CHANGELOG for v1.12.1 release
• 3005b20 Fix IPv4 group containing IPv6 endpoints in dual-stack cluster (#5195)
• 7b1f364 Bump up libOpenflow and ofnet versions (#5160)
• 1948085 Fix ClickHouse service not found in FA e2e test (#5148)
• ba754aa Use k8s 1.27.2 and containerd for e2e (#5151)
• f7d1123 Fix incorrect FlowMod message passing in openflow client modifyFlows (#5145)
• 53354ae Fix Egress IP not advertised in some cases (#5141)
• 5deb5f9 Fix ClusterClaim deletion webhook bug (#5118)
• fac1140 Bugfix: TCP src port is unset on the TCP DNS response flow (#5106)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[tushartathgur]

@dependabot rebase

[dependabot]

Superseded by #411.