0.7.0-rc2

Bump to 0.7.0-rc2

Signed-off-by: Tom Pantelis <[email protected]>

0.7.0-rc1

Bump to submariner 0.7.0-rc1

Signed-off-by: Tom Pantelis <[email protected]>

New subctl necessary to update the operator permissions

Update coreDNS coremap (#628)


If there is stale Lighhouse DNS Service IP in in-cluster CoreDNS config
map it will be updated with new serviceIP

Fixes: submariner-io/submariner-operator#620

Signed-off-by: Aswin Surayanarayanan <[email protected]>
Co-authored-by: Thomas Pantelis <[email protected]>
Co-authored-by: Vishal Thapar <[email protected]>

Support detecting all networks in OpenShift

Networks in config.openshift.io/v1 is exposed for both
OpenShiftSDN and OVNKubernetes, while ClusterNetworks
seems to be only used with the operator for OpenShift SDN.

Related-Issue: #778

0.6.1 release

No functional changes exist in this release, but fixes the testing
issue of Lighthouse + Globalnet handled in [1] and [2].

This version will also set imagePullPolicy of pods to Always when
the "devel" Cutting edge version is installed.

[1] submariner-io/lighthouse#272
[2] submariner-io/lighthouse#275

0.6.0 release

Bump Submariner & Lighthouse to 0.6.0

Signed-off-by: Miguel Angel Ajo <[email protected]>

0.5.0

This release mainly focused on continuing the alignment of Lighthouse's service discovery support with the [Kubernetes Multicluster
Services KEP][MCS KEP].

• Lighthouse has been modified per the [Kubernetes Multicluster Services KEP][MCS KEP] as follows:
• The MultiClusterService resource has been replaced by ServiceImport.
• The ServiceExport resource is now updated with status information as lifecycle events occur.
• Lighthouse now allows a ServiceExport resource to be created prior to the associated Service.
• Network discovery was moved from subctl to the Submariner operator.
• Several new commands were added to subctl: export service, show versions, show connections, show networks, show endpoints, and show gateways.
• The subctl info command has been removed in lieu of the new show networks command.
• The Globalnet configuration has been moved from the broker-info.subm file to a ConfigMap resource stored on the
  broker cluster. Therefore, the new subctl cannot be used on brownfield Globalnet deployments where this information
  was stored as part of broker-info.subm.
• subctl now supports joining multiple clusters in parallel without having to explicitly specify the globalnet-cidr for the
  cluster to work around this issue. The globalnet-cidr will automatically be allocated by subctl for each cluster.
• The separate --operator-image parameter has been removed from subctl join and the --repository and --version
  parameters are now used for all images.
• The Submariner operator status now includes Gateway information.
• Closed technical requirements for Submariner to become a CNFC project, including Developer Certificate of Origin compliance,
  and source code linting.

Libreswan cable driver, Kubernetes multicluster service discovery

This release is mainly focused on the libreswan Submariner cable driver implementation,
as well as standardizing the service discovery support in Lighthouse with the upstream kubernetes KEP [1].

• The libreswan IPsec cable driver is available for testing. It’s been included on the testing matrix of the project.
• Lighthouse has been modified per [1] as follows:
  • A ServiceExport object needs to be created alongside any Service that is intended to be exported to participant clusters
  • The supercluster services can now be accessed with ..svc.supercluster.local
• Globanet overlapping CIDR support improvements and bug fixes
• Multiple CI improvements implemented from shipyard
• The testing matrix is now run via GitHub actions
• The submariner-operator now completely handles the Lighthouse deployment via the ServiceDiscovery CRD.
• subctl verify is now available for connectivity, service-discovery and gateway-failover.

Fix verify-connectivity with globalnet

This release fixes subctl verify-connectivity when used with globalnet.

v0.3.0

• Lighthouse no longer depends KubeFed. All metadata exchange is handled over the Broker as MultiClusterService CRs.
• Experimental Wireguard support has been added as a pluggable CableDriver option in addition to the current default IPsec (note: still not compatible with globalnet)
• Submariner reports the active and passive gateways as well as connection status as a gateway.submariner.io CRD.
• The Submariner Operator reports a detailed status of the deployment.
• The gateway redundancy/failover tests are now enabled and stable in CI.
• Globalnet hostNetwork to remote globalIP is now supported. Previously, when a pod used hostNetworking it was unable to connect to a remote service via globalIP.
• A globalCIDR can be manually specified when joining a cluster with globalnet enabled. This enables CI speed optimizations via better parallelism.
• Operator and subctl are more robust via standard retries on updates.
• Subctl creates a new individual access token for every new joined cluster.