v1.5.37

What's Changed

• Two NPM fixes. The first fix properly addresses #2977 for all kinds of NetPols (v1.5.36 had a fix only for NetPols with CIDRs). The second fix addresses #2997.
  • [backport] fix: [Linux] [NPM] handle #2977 for netpols without cidr by @huntergregory in #3006
  • [backport] fix: [NPM] [Linux] handle more than 15 leaked ipsets by @huntergregory in #3007
• backport: ci: remove logger field from portforwarder to avoid race with goroutine (#2959) by @QxBytes in #2975

Full Changelog: v1.5.36...v1.5.37

v1.6.6

What's Changed

• Add join VNET call for every AZR NC unpublish call by @smittal22 in #2983
• fix: add legacy IPAM metrics back to IPAMv2 by @rbtr in #2970

Full Changelog: v1.6.5...v1.6.6

v1.5.36

What's Changed

• Addressing two issues with NPM when with editing or deleting NetPols with CIDR rules. The below changes 1) auto-mitigate #2963 when detected and 2) fix #2977 for NetPols with CIDR rules.
  • [backport] fix: [NPM] [Linux] panic if applyIPSets continues to fail by @huntergregory in #2969
  • [backport] fix: [NPM] [Linux] race when deleting/readding NetPol by @huntergregory in #2980
• backport: ci: run some cni windows uts in the pipeline (#2925) by @QxBytes in #2962

Full Changelog: v1.5.35...v1.5.36

v1.6.5

What's Changed

• ci: remove ovs create bridge test by @QxBytes in #2942
• fix: dualnic options to avoid overwritting vlanMaps by @paulyufan2 in #2928
• deps: bump github.com/prometheus/client_golang from 1.20.0 to 1.20.1 by @dependabot in #2943
• fix: k8s load test scenario for dualstack vs datapath by @camrynl in #2951
• fix: Add --kubernetes-version to linux-cniv1-up cluster creation by @jpayne3506 in #2952
• Add UTs to configure secondary interfaces add Result for windows swiftv2 by @paulyufan2 in #2923
• feat: add custom codeql queries by @QxBytes in #2919
• deps: bump github.com/vishvananda/netlink from 1.2.1-beta.2 to 1.2.1 by @dependabot in #2953
• chore: remove cnm code by @QxBytes in #2906
• fix: don't print stack trace of error for certain logs to prevent spam by @QxBytes in #2904
• deps: bump github.com/vishvananda/netlink from 1.2.1 to 1.3.0 by @dependabot in #2956
• [CNS] Add unit tests to Standalone SwiftV2 scenario by @jackieluc in #2932
• Update dockerfiles to use go v1.22 by @aggarwal0009 in #2931
• deps: bump github.com/prometheus/client_golang from 1.20.1 to 1.20.2 by @dependabot in #2955
• deps: bump github.com/coreos/go-iptables from 0.7.0 to 0.8.0 by @dependabot in #2960
• deps: bump mvdan.cc/gofumpt from 0.6.0 to 0.7.0 in /build/tools by @dependabot in #2930
• Add UTs to test findMasterInterface by @paulyufan2 in #2941
• fix: [NPM] [Linux] panic if applyIPSets continues to fail by @huntergregory in #2964
• deps: bump github.com/prometheus/common from 0.55.0 to 0.56.0 by @dependabot in #2966
• feat: add device plugin support to CNS by @thatmattlong in #2886
• deps: bump google.golang.org/grpc from 1.65.0 to 1.66.0 by @dependabot in #2972
• deps: bump github.com/prometheus/common from 0.56.0 to 0.57.0 by @dependabot in #2971
• ci: remove logger field from portforwarder to avoid race with goroutine by @QxBytes in #2959
• fix: Ignore accelnetEnable flag to disable swiftv2 Linux&&Windows for AccelentNIC by @paulyufan2 in #2976
• fix: [NPM] [Linux] race when deleting/readding NetPol with CIDR rules by @huntergregory in #2978
• Add UTs for CNI Windows Policy by @paulyufan2 in #2965

Full Changelog: v1.6.4...v1.6.5

v1.5.35

What's Changed

• backport: test: validate inputs to acn components (#2845) by @QxBytes in #2889
• backport: chore: move cns from servercore to nanoserver (#2454) by @rbtr in #2936
• backport: deps: bump github.com/docker/docker (#2912) by @rbtr in #2938
• [backport] CI/CD changes to PR and CNI Release Test Pipelines by @jpayne3506 in #2940
• Revert accelnet cns 1.5.32 by @kmurudi in #2948

Full Changelog: v1.5.34...v1.5.35

azure-ipam/v0.3.0

Changes:

• 456ce7c feat: add new OverlayExtensionConfig CRD (#2892)
• 68ede66 [FIX] ci: Update AzCLI task to v2 (#2922)
• 4902139 chore: move cns from servercore to nanoserver (#2454)
• b48007e [fix] ci: Update expected cilium connectivity test namespace (#2926)
• 742ca41 ci: Add node restart to cniv2 E2E (#2901)
• f3ead91 deps: bump github.com/prometheus/client_golang from 1.19.1 to 1.20.0 (#2920)

This list of changes was auto generated.

What's Changed

• deps: bump github.com/prometheus/client_golang from 1.19.1 to 1.20.0 by @dependabot in #2920
• ci: Add node restart to cniv2 E2E by @jpayne3506 in #2901
• [fix] ci: Update expected cilium connectivity test namespace by @jpayne3506 in #2926
• chore: move cns from servercore to nanoserver by @rbtr in #2454
• [FIX] ci: Update AzCLI task to v2 by @jpayne3506 in #2922
• feat: add new OverlayExtensionConfig CRD by @robogatikov in #2892

New Contributors

• @robogatikov made their first contribution in #2892

Full Changelog: v1.6.3...azure-ipam/v0.3.0

v1.6.3

What's Changed

• [fix] ci: update cyclonus workflow by @jpayne3506 in #2866
• ci: Update triggers for NPM pipelines by @jpayne3506 in #2867
• deps: bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.12.0 to 1.13.0 by @dependabot in #2859
• ci: update Cyclonus workflow triggers by @jpayne3506 in #2868
• ci: [NPM] speed up Windows conformance and disable Windows Cyclonus/Scale by @huntergregory in #2874
• chore: add enable k8s device plugin to cns config by @jaer-tsun in #2869
• ci: Remove winio from replace( ) by @jpayne3506 in #2864
• deps: bump github.com/containernetworking/cni from 1.2.2 to 1.2.3 in /azure-ipam by @dependabot in #2873
• deps: bump github.com/prometheus/common from 0.46.0 to 0.55.0 by @dependabot in #2816
• ci: [NPM] NPM Conformance Test improvements by @jpayne3506 in #2875
• fix: [NPM] [Linux] race condition when editing NetPol with "except" CIDR by @huntergregory in #2841
• deps: bump github.com/Microsoft/hcsshim from 0.12.0 to 0.12.5 by @dependabot in #2854
• ci: [NPM] add bash directive to scale scripts by @huntergregory in #2876
• fix: add ipv6 port policy in addition to ipv4 policy if no host ip and ipv6 enabled by @QxBytes in #2852
• Return error if hns network exists for transparent network by @paulyufan2 in #2877
• Add Initial Compliant Pipeline Files by @sheylatrudo in #2870
• deps: bump github.com/docker/docker from 24.0.9+incompatible to 26.1.4+incompatible by @dependabot in #2891
• fetch primary mac for hns accelnet by @kmurudi in #2857
• feat: Create win 2025 images for CNI and CNS using windows servercore insider tags. by @sivakami-projects in #2878
• deps: bump golang.org/x/sys from 0.22.0 to 0.23.0 by @dependabot in #2895
• deps: bump golang.org/x/sync from 0.7.0 to 0.8.0 by @dependabot in #2896
• deps: bump golang.org/x/time from 0.5.0 to 0.6.0 by @dependabot in #2897
• refactor: create safer command execution method by @QxBytes in #2899
• add accelnet support on CNI by @paulyufan2 in #2853
• ci: enable state validation in linux cni v1 by @QxBytes in #2898
• deps: bump golang.org/x/crypto from 0.25.0 to 0.26.0 by @dependabot in #2903
• deps: bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.13.0 to 1.14.0 by @dependabot in #2905
• deps: bump google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.4.0 to 1.5.1 in /build/tools by @dependabot in #2890
• ci: Update CNS daemonset capabilities within E2E by @jpayne3506 in #2902
• deps: bump github.com/docker/docker from 26.1.4+incompatible to 26.1.5+incompatible by @dependabot in #2912
• hotfix: set hcnNetwork flag as non-persistent mode by @paulyufan2 in #2911
• fix: pass right interface name to generate hns endpoint name as expected by @paulyufan2 in #2915
• deps: bump golang.org/x/sys from 0.23.0 to 0.24.0 by @dependabot in #2909
• fix: make statless CNI to return an empty state when CNI GET API is … by @behzad-mir in #2921

New Contributors

• @sheylatrudo made their first contribution in #2870

Full Changelog: v1.6.1...v1.6.3

v1.5.34

What's Changed

• backport: fix: add ipv6 port policy in addition to ipv4 policy if no host ip and ipv6 enabled (#2852) by @QxBytes in #2883
• [backport] fix/ci: Linux NPM race condition editing "except" CIDR and NPM pipeline fixes by @huntergregory in #2882
  • Backports the fix for #2840 from #2841.
• ci: make lint target release/v1.5 branch by @QxBytes in #2888

Full Changelog: v1.5.32...v1.5.34

v1.6.1

What's Changed

• fix: Rename test file by @bohuini in #2784
• feat: bumping dropGZ to 1.6.0 and adding stateless CNI to Windows by @behzad-mir in #2785
• fix: move CNS to distroless-iptables base image by @rbtr in #2661
• deps: bump github.com/golangci/golangci-lint from 1.59.0 to 1.59.1 in /build/tools by @dependabot in #2774
• [CNS] refactor: remove redundant check for TLSSettings.TLSPort by @jackieluc in #2780
• ci: Remove depreciated values from Cilium nightly config by @jpayne3506 in #2787
• Added gRPC Server Boilerplate Code for CNS by @Kevincxv in #2745
• combine linux and win Dockerfiles using build targets by @rbtr in #2559
• ci: bump golangci/golangci-lint-action from 5 to 6 by @dependabot in #2734
• deps: bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #2791
• deps: bump github.com/containernetworking/cni from 1.2.0 to 1.2.1 in /azure-ipam by @dependabot in #2794
• deps: bump k8s.io/klog/v2 from 2.120.1 to 2.130.0 by @dependabot in #2790
• deps: bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.11.1 to 1.12.0 by @dependabot in #2771
• deps: bump github.com/containernetworking/plugins from 1.5.0 to 1.5.1 in /azure-ipam by @dependabot in #2795
• deps: bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 by @dependabot in #2778
• Add default routes k8s windows by @paulyufan2 in #2797
• deps: bump github.com/spf13/cobra from 1.8.0 to 1.8.1 in /dropgz by @dependabot in #2792
• deps: bump github.com/containernetworking/cni from 1.2.0 to 1.2.1 by @dependabot in #2796
• deps: bump k8s.io/klog/v2 from 2.130.0 to 2.130.1 by @dependabot in #2799
• deps: bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.6.0 to 1.7.0 by @dependabot in #2802
• deps: bump github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v5 from 5.1.1 to 5.2.0 by @dependabot in #2803
• fix: move bufio reader creation out of for loop to fix telemetry unmarshal errors by @QxBytes in #2789
• fix: CNS should ignore NNCs that are being deleted by @rbtr in #2798
• build windows 2025 binaries by @paulyufan2 in #2804
• fix: Modified the value of DelegatedVMNIC to resolve compatibility issue by @bohuini in #2801
• deps: bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.1 to 1.6.0 in /azure-ipam by @dependabot in #2782
• deps: bump github.com/containernetworking/cni from 1.2.1 to 1.2.2 in /azure-ipam by @dependabot in #2809
• deps: bump github.com/containernetworking/cni from 1.2.1 to 1.2.2 by @dependabot in #2811
• fix: Revert the naming change for DelegatedVMNIC on master by @bohuini in #2810
• add gateway on CNS to get populated by @paulyufan2 in #2805
• fix: update azure-vnet directory permissions by @QxBytes in #2819
• fix: add hns network id to endpoint struct for pushing to cns in stateless by @QxBytes in #2822
• ci: align cilium charts with AKS by @camrynl in #2820
• feat: add subnet address space to mtpnc status by @sharifnasser in #2825
• Fix ACN PR Pipeline failures related to swiftv2 by @jc2543 in #2826
• deps: bump google.golang.org/grpc from 1.64.0 to 1.65.0 by @dependabot in #2829
• feat: Adding backend interfaces support to CNS by @shreyashastantram in #2693
• Add Status to NodeInfo CRD by @aggarwal0009 in #2827
• add prefix length from mtpnc to podipinfo & gatewayip by @kmurudi in #2828
• ci: Adjust VM usage for CNI Release Test Pipeline by @jpayne3506 in #2837
• Add swiftv2 middleware support for standalone service fabric scenario (windows) by @kmurudi in #2634
• ci: add AzureLinux, rdma and ARM64 release test scenarios for cilium dual stack by @camrynl in #2835
• fix nodeInfo schema by @aggarwal0009 in #2838
• add L1VH IB support on CNI by @paulyufan2 in #2762
• deps: bump golang.org/x/crypto from 0.24.0 to 0.25.0 by @dependabot in #2834
• Delete hack/manifests/sshd.yaml by @rbtr in #2839
• test: add ut for populating network and endpoint hns id in endpoint and endpoint info structs by @QxBytes in #2844
• ci: Cleanup ACN PR pipeline yaml by @jpayne3506 in #2861
• ci: Unblock nightly pipeline by @jpayne3506 in #2863
• feat: Add CNS API to retrieve VMUniqueID from IMDS by @msvik in #2842
• Add MacAddress to NodeInfo CRD by @aggarwal0009 in #2843
• test: validate inputs to acn components by @QxBytes in #2845
• ci: Shift E2E cluster creation by @jpayne3506 in #2862

New Contributors

• @sharifnasser made their first contribution in #2825

Full Changelog: v1.6.0...v1.6.1

v1.5.32

What's Changed

• ci: Change release/v1.5 merge queue trigger by @jpayne3506 in #2815
• chore: update cni in dropgz to 1.5.30 by @QxBytes in #2831
• backport acn pipeline stability fix by @jc2543 in #2833
• [backport] ci: Adjust VM usage for CNI Release Test Pipeline (#2837) by @jpayne3506 in #2848
• fix: Revert "refactor: code changes for stateless cni and swift v2 (#2688)" on release/v1.5 by @jpayne3506 in #2847
• fix: CNS should ignore NNCs that are being deleted (#2798) by @rbtr in #2850

Full Changelog: v1.5.30...v1.5.32