search

k8snetworkplumbingwg / multi-networkpolicy-iptables

MultiNetworkPolicy iptable based implementation
Apache License 2.0
13 stars 19 forks source link

Bump github.com/containernetworking/plugins from 0.8.5 to 0.8.6 #56

Closed dependabot[bot] closed 8 months ago

dependabot[bot] commented 11 months ago

Bumps github.com/containernetworking/plugins from 0.8.5 to 0.8.6.

Release notes

Sourced from github.com/containernetworking/plugins's releases.

CNI plugins v0.8.6

This is a minor release with some bugfixes and small improvements

New features

  • Support device id in host device plugin (#471).
  • win-bridge: add support for portMappings capability (#475).
  • Make host-device to work with virtio net device (#453).

Small improvements

  • ptp, bridge: disable accept_ra on the host-side interface (#484).
  • modify the error url of windowscontainer (#460).
  • portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin rule only allow the container itself to access the ports it is exposing thru the host IP. Other containers in the same subnet might also want to access this service via the host IP, so apply this rule to the whole subnet instead of just for the container.
  • Unlock OS thread after netns is restored (#455).

Bugfixes

  • plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used which routed an entire cidr based on source, not only the bound address.
  • check bridge's port state (#468). fix #463
  • Reset the route flag before moving the rule (#472).
  • replace juju/errors because of CNCF license scan (#458). ref to #457
  • loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin. The IPv6 address check loops over IPv4 addresses.

As always, thanks to all the contributors.

Commits
  • ad10b6f Merge pull request #484 from squeed/disable-ra
  • 219eb9e ptp, bridge: disable accept_ra on the host-side interface
  • f7a2fc9 Merge pull request #460 from timyinshi/windowcontainer-new
  • 6957f6c Merge pull request #479 from Nordix/issue-478
  • 02bfece plugins/meta/sbr: Adjusted ipv6 address mask to /128
  • 5af9ff4 Merge pull request #469 from AlbanBedel/portmap-hairpin-subnet
  • 44d92c1 Merge pull request #475 from vboulineau/vboulineau/hostport_windows
  • 5e0fbd8 portmap: Apply the DNAT hairpin to the whole subnet
  • a78853f Support device id in host device plugin (#471)
  • 2d2583e win-bridge: add support for portMappings capability
  • Additional commits viewable in compare view


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/k8snetworkplumbingwg/multi-networkpolicy-iptables/network/alerts).

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.