v0.9.2

What's Changed

• Iptracker safer defaults @aojea in #244
• Bump dependencies

Full Changelog: v0.9.1...v0.9.2

v0.9.1

What's Changed

• fix race condition on iptracker by @aojea in #224
• Fix push for npa-v1alpha2 as it was only building before by @npinaeva in #226
• fix multiple minor issues with the tooling for building

Full Changelog: v0.9.0...v0.9.1

v0.9.0

What's Changed

• Introduce modular PolicyEvaluator architecture for better testability and extensibility by @aojea in #197
• Refactor dataplane controller and policy evaluation by @aojea in #201
• decouple Interfaces from Implementation by @aojea in #202
• allow to pass kubeconfig as flag by @aojea in #206
• move to a pluggable architecture by @aojea in #207
• print version at start by @aojea in #208
• Optimize Pod IP and metadata distribution for large clusters using kube-ip-tracker by @aojea in #190
• Cluster Network Policy by @aojea in #199

Full Changelog: v0.8.1...v0.9.0

v0.8.1

What's Changed

• Liveness probes by @aojea in #160

• Add uninstall steps and nftables cleanup note to README by @gsakun in #163

• Fix graceful shutdown: handle SIGTERM properly to cleanup resources by @gsakun in #164

• remove cleanup nftable notice from readme by @gsakun in #178

• network policy: Allow blocking IPv6 ping by @oshoval in #192

New Contributors

• @gsakun made their first contribution in #163
• @oshoval made their first contribution in #192

Full Changelog: v0.8.0...v0.8.1

v0.8.0

What's Changed

• Admin Network Policies: NPEP-133: Domain Names Selector for Egress Traffic by @aojea in #157.
  NOTE This feature npep-133-fqdn-egress-selector is in the experimental channel so you need to install the experimental CRDs

kubectl apply -f https://raw.githubusercontent.com/kubernetes-sigs/network-policy-api/main/config/crd/experimental/policy.networking.k8s.io_adminnetworkpolicies.yaml

• Use NRI to solve the racy dependency on the Pod.Status.PodIPs kubernetes/kubernetes#85966

New Contributors

• @rata made their first contribution in #156

Full Changelog: v0.7.0...v0.8.0

v0.7.0 Distroless

What's Changed

Kube-network-policies no longer depend on the nft userspace libraries, that means that the image is just the golang binary, with the benefits of a reduced size and less dependencies that makes it easier to maintain and vendor.

• [Docs] comment on udp and effected pods in readme by @paulgmiller in #119
• Use structured logging by @uablrek in #50
• Give metrics and logging a verdict dimension by @paulgmiller in #115
• rename metrics by @aojea in #135
• Use netlink interface directly (distroless) by @aojea in #136

New Contributors

• @sword-jin made their first contribution in #117
• @paulgmiller made their first contribution in #119

Full Changelog: v0.6.1...v0.7.0

v0.6.1

What's Changed

• Allow to configure the nftables name and implement defaulting in the config data structure by @aojea in #106
• Add helm chart. by @mneverov in #107

New Contributors

• @mneverov made their first contribution in #107

Full Changelog: v0.6.0...v0.7.0

v0.6.0

What's Changed

• Workaround dns kernel bug by @aojea in #95

New Contributors

• @liangyuanpeng made their first contribution in #72
• @adrianmoisey made their first contribution in #93

Full Changelog: v0.5.1...v0.6.0

v0.5.1

What's Changed

• do not process root user local traffic by network policies by @aojea in #66

Full Changelog: v0.5.0...v0.5.1

v0.5.0

What's Changed

• move nftables creation inside the controller constructor by @aojea in #53
• Parse IPv6 extension headers by @uablrek in #51
• IPVS support by @aojea in #54

New Contributors

• @uablrek made their first contribution in #51

Full Changelog: v0.4.0...v0.5.0