Bump antrea.io/antrea from 1.13.0 to 1.14.0

[dependabot]

Bumps antrea.io/antrea from 1.13.0 to 1.14.0.

Release notes

Sourced from antrea.io/antrea's releases.

Release v1.14.0

Added

• Add rate-limit config to Egress to specify the rate limit of north-south egress traffic of this Egress. (#5425, [@​GraysonWu])
• Add IPAllocated and IPAssigned conditions to Egress status to improve Egress visibility. (#5282, [@​AJPL88] [@​tnqn])
• Add goroutine stack dump in SupportBundle for both Antrea Agent and Antrea Controller. (#5538, [@​aniketraj1947])
• Add "X-Load-Balancing-Endpoint-Weight" header to AntreaProxy Service healthcheck. (#5299, [@​hongliangl])
• Add log rotation configuration in Antrea Agent config for audit logs. (#5337 #5366, [@​antoninbas] [@​mengdie-song])
• Add GroupMembers API Pagination support to Antrea Go clientset. (#5533, [@​qiyueyao])
• Add Namespaced Group Membership API for Antrea Controller. (#5380, [@​qiyueyao])
• Support Pod secondary interfaces on VLAN network. (#5341 #5365 #5279, [@​jianjuns])
• Enable Windows OVS container to run on pristine host environment, without requiring some dependencies to be installed manually ahead of time. (#5440, [@​NamanAg30])
• Update Install-WindowsCNI-Containerd.ps1 script to make it compatible with containerd 1.7. (#5528, [@​NamanAg30])
• Add a new all-in-one manifest for the Multi-cluster leader cluster, and update the Multi-cluster user guide. (#5389 #5531, [@​luolanzone])
• Clean up auto-generated resources in leader and member clusters when a ClusterSet is deleted, and recreate resources when a member cluster rejoins the ClusterSet. (#5351 #5410, [@​luolanzone])

Changed

• Multiple APIs are promoted from beta to GA. The corresponding feature gates are removed from Antrea config files.
  • Promote feature gate EndpointSlice to GA. (#5393, [@​hongliangl])
  • Promote feature gate NodePortLocal to GA. (#5491, [@​hjiajing])
  • Promote feature gate AntreaProxy to GA, and add an option antreaProxy.enable to allow users to disable this feature. (#5401, [@​hongliangl])
• Make antrea-controller not tolerate Node unreachable to speed up the failover process. (#5521, [@​tnqn])
• Improve antctl get featuregates output. (#5314, [@​cr7258])
• Increase the rate limit setting of PacketInMeter and the size of PacketInQueue. (#5460, [@​GraysonWu])
• Add hostAliases to Helm values for Flow Aggregator. (#5386, [@​yuntanghsu])
• Decouple Audit logging from AntreaPolicy feature gate to enable logging for NetworkPolicy when AntreaPolicy is disabled. (#5352, [@​qiyueyao])
• Change Traceflow CRD validation to webhook validation. (#5230, [@​shi0rik0])
• Stop using /bin/sh and invoke the binary directly for OVS commands in Antrea Agent. (#5364, [@​antoninbas])
• Install flows for nested Services in EndpointDNAT only when Antrea Multi-cluster is enabled. (#5411, [@​hongliangl])
• Make rate-limiting of PacketIn messages configurable; the same rate-limit value applies to each feature that is dependent on PacketIn messages (e.g, Traceflow) but the limit is enforced independently for each feature. (#5450, [@​GraysonWu])
• Change the default flow's action to drop in ARPSpoofGuardTable to effectively prevent ARP spoofing. (#5378, [@​hongliangl])
• Remove auto-generated suffix from ConfigMap names, and add config checksums as Deployment annotations in Windows manifests, to avoid stale ConfigMaps when updating Antrea while preserving automatic rolling of Pods. (#5545, [@​Atish-iaf])
• Add a ClusterSet deletion webhook for the leader cluster to reject ClusterSet deletion if there is any MemberClusterAnnounce. (#5475, [@​luolanzone])
• Update Go version to v1.21. (#5377, [@​antoninbas])

Fixed

• Remove the dependency of the MulticastGroup API on the NetworkPolicyStats feature gate, to fix the empty list issue when users run kubectl get multicastgroups even when the Multicast is enabled. (#5367, [@​ceclinux])
• Fix antctl tf CLI failure when the Traceflow is using an IPv6 address. (#5588, [@​Atish-iaf])
• Fix a deadlock issue in NetworkPolicy Controller which causes a FQDN resolution failure. (#5566 #5583, [@​Dyanngg] [@​tnqn])
• Fix NetworkPolicy span calculation to avoid out-dated data when multiple NetworkPolicies have the same selector. (#5554, [@​tnqn])
• Use the first matching address when getting Node address to find the correct transport interface. (#5529, [@​xliuxu])
• Fix rollback invocation after CmdAdd failure in CNI server and improve logging. (#5548, [@​antoninbas])
• Add error log when Antrea network's MTU exceeds Suricata's maximum supported value. (#5408, [@​hongliangl])
• Do not delete IPv6 link-local route in route reconciler to fix cross-Node Pod traffic or Pod-to-external traffic. (#5483, [@​wenyingd])
• Do not apply Egress to traffic destined for ServiceCIDRs to avoid performance issue and unexpected behaviors. (#5495, [@​tnqn])
• Unify TCP and UDP DNS interception flows to fix invalid flow matching for DNS responses. (#5392, [@​GraysonWu])
• Fix the burst setting of the PacketInQueue to reduce the DNS response delay when a Pod has any FQDN policy applied. (#5456, [@​tnqn])
• Fix SSL library downloading failure in Install-OVS.ps1 on Windows. (#5510, [@​XinShuYang])

... (truncated)

Commits

• df022c0 Set VERSION to v1.14.0
• acb7410 Update CHANGELOG for v1.14.0 release
• e5f044d Check deletion event matches ClusterSet before Multi-cluster cleanup (#5638)
• 55e731d Recreate resources when a member cluster rejoin the ClusterSet (#5410)
• 47139ca Fix doc format issue in windows.md (#5626)
• c8d8ffd Clean up auto-generated resources in leader and member clusters (#5351)
• 5b74593 Support for Windows HostProcess Pod for containerd 1.7 and deployment with K8...
• 86fe766 Enable Windows OVS Container to run on pristine Host Environment (#5440)
• ffc6495 Egress QoS support (#5425)
• 3780f72 Bump aquasecurity/trivy-action from 0.12.0 to 0.13.0 (#5614)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #127.