Release Notes

Version 0.14.9

Features

Add DynamicASN field for a BGPPeer, which allows the speaker to detect the AS number to use without explicitly setting it. The new field is mutually exclusive with the existing PeerASN field, and one of them must be specified for any given BGPPeer. (#2552, @oribon)
Added support for prefer-dual-stack IPFamilyPolicy, allowing dual-stack IP assignment where available, while gracefully falling back to single-stack as needed. (#2587, @mquhuy)
Clear advertisement when speaker runs in a cordoned (unschedulable) node (#2470, @karampok)
The annotation prefix “metallb.universe.tf” is deprecated by now. Please use the new prefix “metallb.io”. E.g. “metallb.io/address-pool” instead of “metallb.universe.tf/address-pool”. The old prefix is still supported. However, migrating to the new prefix is highly recommend. Future versions might remove this backwards compatibility. (#2495, @disco-stu)
Updates prometheus rules to utilize standard warning and critical alert levels

Bugs or Regression

Enforce mutual exclusion of podMonitor and serviceMonitor in the helm chart. (#2589, @fedepaol)
BGP native mode: narrow down the validation so that ipv6 pools are not valid only if there is a bgp advertisement referencing them. (#2593, @fedepaol)
Enable Graceful Restart for frr-k8s backend (#2550, @karampok)
Ffr-k8s: Make sure no duplicates prefix are passed to backend (#2580, @karampok)
Fix default BGPPeer hold/keepalive timers being incompatible with FRRConfigurations. We now delegate the defaults to FRR itself instead of hard-coding them, supporting 0 timers as well. (#2537, @oribon)
Fixed Community resources updates being denied without explanation. (#2608, @oribon)
Helm chart: Avoid speaker resources creation when speaker is disabled (#2466, @unai-ttxu)
Deprecation of BGPPeer v1beta1 in favor of v1beta2. (#2503, @fedepaol)

Documentation

DOC: Fixes example of L2Advertisement (#2564, @ppeereb1)
DOC: Fix the mermaid schemes for the Issues On Calico page (#2513, @thommelutten)

This release includes contributions from Adrian Vondendriesch, dependabot[bot], Derek Nola, Enrique Llorente Pastora, Federico Paolinelli, Huy Mai, Joseph Shanak, karampok, Konstantinos Karampogias, Marco Cristofanilli, Micah Nagel, Ori Braunshtein, Paul Peereboom, Thomas, Tobias Klauser, Tyler Auerbeck, Unai Arrien

Version 0.14.8

Feature

Use frr-k8s 0.0.14. (#2467, @fedepaol)

Bug fixes

Fix the broken all-in-one/kustomize manifests from v0.14.7.

Version 0.14.7

Bug fixes

Fix the double immutable field validation in the ServiceL2Status CRD, which may make the validation of the CRD to fail. (#2461, @fedepaol)

Version 0.14.6

Feature

Add graceful-restart support in frr mode (#2386, @karampok)
Add helm / configuration parameters to allow MetalLB to consume an frr-k8s instance running in a separate namespace. (#2444, @fedepaol)
The speaker and the controller containers are now based on a distroless image, reducing the attack surface (#2418, @minmzzhang)
Use frr 9.1.0 and frr-k8s 0.0.13. (#2450, #2456, @fedepaol)

Documentation

Upgrade Hugo to v0.124.1, Theme change to Hugo Relearn Theme (version: 5.27.0) (#2364, @tico88612)

Bug or Regression

Enable Layer2Service status, a crd to monitor the status of a service exposed via L2 (#2351, @lwabish)
Fix session flapping when adding / removing services and BFD is enabled. (#2454, @fedepaol)
Fix(chart,prometheusrules): alert not matching labels for e.g. speakers (#2453, @sebastiangaiser)
Limit processing the node events when label changes or when only the NetworkUnavailable condition changes, as opposed to processing when every condition (including heartbeats!) changes. (#2452, @shettyg)
Propagate the metallb labels to the speaker’s service monitor service (#2390, @huseyinbabal)

This release includes contributions from Ethan Leisinger, Federico Paolinelli, François Rigault, Guru Shetty, huseyinbabal, karampok, lwabish, Min Zhang, Sebastian Gaiser, tico88612, Tyler Auerbeck. Thanks!

Version 0.14.5

New features:

Bump frr-k8s to 0.0.11 (#2357, @AlinaSecret)
Support BGP disableMP field in FRR-K8s mode (#2357, @AlinaSecret)

BugFixes:

Fix the handling of readyness conditions of endpointslices: instead of looking at the serving condition first, we look at the ready condition. This allows metallb to respect the publishNotReadyAddresses field of the services. (#2337, @farodin91)

This release include contributions from Adrian Vondendriesch, Alina Sudakov, clonefetch, Federico Paolinelli, Jan Jansen, lwabish, Micah Nagel, tico88612, tozastation. Thanks!

Version 0.14.4

New features:

Add option to configure BGP connect time (PR_2144)
Bump FRR to 9.0.2 (PR 2282, Issue 2256)
Make the name of webhook service and cert metallb specific to avoid name conflicts with other resources in the cluster. (PR 2244, Issue 2174).
Provide a “ignore-exclude-lb” flag to ignore the exclude-from-external-load-balancers label (PR 2280, Issue 2274)
The log level of the logs for skipping the BGP announcement because of the ’node.kubernetes.io/exclude-from-external-load-balancer’ label and the network unavailable condition are now warning instead of debug. (#2275, @clee)
The metallb-excludel2 configmap is not deployed from the Helm chart if the speaker is disabled. (#2298, @mustdiechik)
Add a field to the BGPPeer CRD to disable MP BGP for the given peer (#2306, @AlinaSecret)
Bump frr-k8s to 0.0.10 (#2306, @AlinaSecret)
Support BGP Connect time field in FRR-K8s mode (#2305, @AlinaSecret)

BugFixes:

Fix the non existing conversion webhook in the Helm CRDs (PR 2269)
Remove dangling AddressPool leftovers (PR 2272 Issue 2270)
Helm: fix the creation of the metrics-certs volume under the presence of the speakerMetricsTLSSecret value, regardless of FRR being enabled (PR 2286)
Docs: remove outdated information about multiprotocol services (PR 2228).
FRR Config: generate the route-map for each local pref / community / large community only once (PR 2292)
Propagate the loglevel to the controller runtime too (PR , Issue 2161)
Expose the speaker metrics port only to localhost if kuberbacproxy is added, so metrics are exported as encrypted only. (#2315, @fedepaol)

This release include contributions from Alina Sudakov, budimanjojo, Chris Lee, cyclinder, Federico Paolinelli, Fish-pro, Kyle Fazzari, Lior Noy, lwabish, Ori Braunshtein, renklus, Ruslan Khizhnyak, shimritproj, tico88612. Thanks!

Version 0.14.3

BugFixes:

Do not deploy the deprecated AddressPool crds and webhooks. The code that was handling them was removed, it makes no sense to deploy them. (PR 2267).

Version 0.14.2

New features:

Add a new experimental “FRR-K8s” based BGP backend (PR 2162, (PR 2183) and others, Design proposal: an instance of FRR can be shared between FRR and other actors, allowing multiple FRR configurations (as long as they don’t conflict), via the FRR-K8s API
Remove IP verification: don’t stale the config if it removes / reassign an IP belonging to a service but honor the configuration (PR 2097, Issue 462
Drop the support for endpoints and rely on endpoint slices only (Issue 2253, PR 2254) NOTE: this will make MetalLB not compatible with clusters older than 1.21
Add support for speaker securityContext (PR 2099)
Remove support for the legacy AddressPool API in favor of IPAddressPools. Being deprecated for a while we finally stop handling the legacy API and remove it, IPs can now be allocated to LoadBalancer Services only via IPAddressPool resources. (PR 2252)
Make the controller preserve the state after reboot. This will allow existing services to keep their IP after restart of the controller (PR 2004, Issue 1984
Use the “serving” field of endpoint slices (PR 2088, Issue 2074
Make the webhook secret’s name configurable (PR 2070, Issue 1993
Allow custom bind address for memberlist (PR 2121)
Add a fieldOwner to the CRDs caBundle field, to prevend CI / CD systems to reconciliate them (PR 2122, Issue 1681
Use AES-256 for memberlist encryption (PR 2140, Issue 1982)
Add extraContainers to the speaker / controller pods (PR 2152)
Speaker: Allow configuring MemberList timeouts for WAN environments (PR 2178)
Allow tls-cipher-suites and tls-min-version via parameters, and set defaults (PR 2083)
Implement NodeExcludeBalancers to exclude nodes as external loadbalancer (PR 2073, ISSUE 2021)
Metrics: add ipv4/6 addresses_in_use_total and addresses_total (PR 2151)
E2E: Verify autoAssign=False works(PR 2264,ISSUE 2221)
Implement ServiceL2Status CRD to expose service announcing status in layer2 mode (PR 2198)

Bug Fixes:

FRR mode: FRR templates: provide a seqnum for the prefix lists (PR 2075
Webhooks: avoid transient errors (PR 2202), ISSUE 2173)
Remove the pointer packages and utilize the ‘ptr’ utility package of Kubernetes (PR 2223)

This release includes contributions from Andreas Karis, Antonio Pitasi, Arjun Singh, AzraelSec, cong, cyclinder, Federico Paolinelli, Giovanni Toraldo, Ivan Kurnosov, Jonas Badstübner, Lior Noy, machinaexdeo, Marcelo Guerrero Viveros, Micah Nagel, Michael Aspinwall, Moritz Schlarb, Ori Braunshtein, Pavel Basov, Robin, shimritproj, Siyi.Yang, timm0e. Thanks!

Version 0.13.12

Change the version of go used to compile the binaries
Disable http2 on the webhook listener
Bump the kubernetes dependencies

This release includes contributions from Federico Paolinelli, Ori Braunshtein, Micah Nagel

Version 0.13.11

New features:

Add namespaces to resources generated using helm templates (PR 1965, Issue 1964)
Improve FRR liveness probes configurability in helm charts (PR 2034, Issue 1963) to make MetalLB’s FRR more tolerant to low resources deployments
Bump FRR to version to 8.5.2 PR 2051

Bug Fixes:

Reprocess all the services only when a pool of IPs changes, and not every time the controller receives it (PR 1951 )
Delete BFD profiles from the configuration when deleted from CRs (PR 1973)
Fix kustomize v5 deprecations (PR 1986, Issue 1985)
Make the configuration conversion stable and avoid unnecessary FRR reloads (PR 1990)
Change the “interface to exclude” log to debug to avoid spamming logs (PR 1992)
Improve the regex excluding well known interfaces from L2 announcement (PR 2058), Issue 2057

This release includes contributions from Andreas Lindhé, ankitm123, cyclinder, Federico Paolinelli, Joshua Cooper, Lior Noy, Marcelo Guerrero Viveros, Patryk Małek, Peter Grace, Rodrigo Campos, Sebastian-RG, Simon, Simon Smith.

Thank you!

Version 0.13.10

New Features:

Bumped the FRR version used by MetalLB to 8.4.2 (PR 1829)
Charts: enable additional controller / speaker labels (PR 1797)
l2: exclude common virtual interfaces for announce services (PR 1767)
FRR Mode: provide a way to append a piece of configuration (PR 1863)
Local Preference validation across multiple advertisements (PR 1820)
Charts: support rbacproxy custom pull policy (PR 1851)
Add support for large communities (PR 1898)
Optimization: on service delete reprocess the services only if the service had an IP assigned (PR 1945)
Make the FRR mode the default one when deploying via charts (PR 1931)

Bug Fixes:

Charts: remove duplicate relabings and metricRelabelings for speaker (PR 18030)
Respect NodeNetworkUnavailable (PR 1759)
Verify LB ip and address pool annotations compatibility (PR 1920)

This release includes contributions from Andreas Karis, Chok Yip Lau, Chris Privitere, conblem, cyclinder, dependabot[bot], DerFels, Federico Paolinelli, Fish-pro, Guillaume SMAHA, liornoy, Marcelo Guerrero Viveros, Mathew Peterson, Periyasamy Palanisamy, Tobias Klauser, xin.li, yulng. Thank you!

Version 0.13.9

New Features:

IPPool service allocation: it’s now possible to allocate a given IPAddressPool to one or more namespaces and / or services (PR 1693)
Annotate the service with the pool used to provide the IP (PR 1637)
BGP via VRF support: in FRR mode is possible to establish a BGP session / announce via an interface that has a linux VRF as master (announcement only, the CNI must be vrf aware) PR 1717

Bug Fixes:

Controller: reprocess the services when a service is deleted (Issue 1586 PR 1645)
Controller: avoid having incompatible services sharing the same ip after restart (Issue 1591, PR 1647)
Restrict the RBACS only to the CRDs and webhooks managed by MetalLB (Issue 1641, PR 1658, PR 1786)
Skip unnecessary events when processing configuration instead of reprocessing them (Issue 1639 and Issue 1770, PR 1666 and PR 1791)
Helm: handle the addressPoolUsage.enabled flag (Issue 1687, PR 1688)
Consume the MemberList secret from a file instead of an env variable (PR 1692)
Publishing a new service may cause the bgp session to flake (FRR mode only) (Issue 1715, PR 1714)
Hide bgp passwords from logs PR 1721
L2: avoid one failure on one interface to disable l2 PR 1726, Issue 1727)
FRR mode: add a liveness probe to the frr container so it can be restarted upon failures PR 1732
Delete the loadbalancers assigned to a service if they are not valid, instead of ignoring the service (Issue 1431, PR 1778)
Use the official FRR images from quay instead of dockerhub (PR 1787)

This release includes contributions from Attila Fabian, cyclinder, David Young, Federico Paolinelli, Felix Yan, giuliano, Johanan Liebermann, liornoy, Łukasz Żułnowski, Mitch Ross, mlguerrero12, Periyasamy Palanisamy, tgfree, Tyler Auerbeck, xin.li, yanggang, Yuval Kashtan. Thank you!

Version 0.13.7

New Features:

CRDs: add additionalPrinterColumn configuration (PR 1632)

Bug Fixes:

Fix service monitor relabelings in Helm charts (PR 1650)
Controller readiness probe: restore to metrics endpoint but wait until the webhook is ready to accept requests, remove the “unable to process a request with an unknown content type” log (Issue 1644 PR 1648).

This release includes contributions from Attila Fabian, Tyler Auerbeck, Federico Paolinelli. Thank you!

Version 0.13.6

New Features:

Layer2: Announce LB IPs from specific interfaces (PR 1536)
Validate MetalLB supports mixed protocol services (Issue 1050 PR 1580)
ConfigMapToCRs tool: align docs to match how to use it within the cluster (PR 1595)
End to end tests: allow using external containers to execute the tests against a real cluster (PR 1604)
Helm: add an option to set resources for speaker sidecar containers (PR 1622)
Helm: add an option to set the validating webhooks failure policy (PR 1623)
Removed the “experimental” wording from FRR mode declaring it being stable but less battle tested (PR 1636)

Bug Fixes:

EndpointSlices detection: use discoveryv1 instead of v1beta1 (PR 1579)
Memory leak in FRR mode in cases where the service is getting it’s IP changed by an external entity (Issue 1581 PR 1583)
L2: if a service with multiple IPs has an IP that is used only by it, and another used by another service, the watch on the one used by it is not removed when deleting the service (PR 1600)
Skip unnecessary node events that don’t affect MetalLB (Issue 1562 PR 1607)
Readiness Probe: wait for the webhook to be ready so helm –wait can wait for the webhook to be ready. (Issue 1610 PR 1611)

This release includes contributions from Attila Fabian, chinthiti, Christoph Mewes, cyclinder, danieled-it, David Jeffers, dependabot[bot], Federico Paolinelli, karampok, liornoy, Periyasamy Palanisamy, Peter Pan, witjem, xin.li, Xuebinqi, zhoujiao. Thank you!

Version 0.13.5

New Features:

Added namespace validation for custom resources (PR 1523)
Helm: added updateStrategy for controller and speakers (PR 1340)
Expose the prometheus metrics securely via kube-rbac-proxy (PR 1545)
Don’t deploy pod security policy, not supported in k8s 1.25+ (PR 1569)

Bug Fixes:

Potential memory leak when receiving updates of the same service multiple times (PR 1570)

This release includes contributions from Federico Paolinelli, Jan Jansen, Magesh Dhasayyan. Thank you!

Version 0.13.4

New Features:

Use cosign to sign the images (PR 1437)

Bug Fixes:

Change the validating webhook configuration name to metallb-webhook-configuration instead of validating-webhook-configuration (PR 1497)
L2 mode error with ipv4 only interfaces with linklocal addresses (Issue 1507 , PR 1506)
L2 Mode: get back to announce on interfaces with no IP assigned. Vlans with no IPs should be able to advertise the service (Issue 1511 PR 1516)
Add the AvoidBuggyIPs flag to the IPAddressPool CRD. Converting a CIDR to a range comes with limitation related to setting the aggregation length and validating it. (Issue 1495, PR 1515)
Add a valid pem format to the CRDs webhooks instead of the empty placeholder. (Issue 1501, Issue 1521, PR 1522)

This release includes contributions from cyclinder, Federico Paolinelli, Periyasamy Palanisamy. Thank you!

Version 0.13.3

Bug Fixes:

Fix images on ARM broken in 0.13.2 (PR 1478)
Fail the helm release if the deprecated configinline is provided (PR 1485)
Helm charts give the permissions to watch communities. This will get rid of the Failed to watch *v1beta1.Community log error. (PR 1487)
Helm charts: add the labelselectors to the webhook service. This solves webhook issues when multiple (PR 1487)

This release includes contributions from Federico Paolinelli, Joshua Carnes, Lalit Maganti, Philipp Born. Thank you!

Version 0.13.2

New Features:

CRD support! A long awaited feature, MetalLB is now configurable via CRs. On top of that, validating webhooks will ensure the validity of the configuration upfront, without needing to check the logs. (PR #1237, PR #1245) Please note that the ConfigMap configuration is not supported anymore. Check the “Changes in behaviour” section for more details.
It’s now possible to choose to advertise addresses in L2 mode, BGP mode, both or just allocate the IP without advertising it.
Announcement node selector. It’s possible to choose which nodes to advertise from the IPs coming from a given pool (PR #1302)
BGPPeer selector. For any IP allocated from a given IPAddressPool, it is possible to choose the subset of BGPPeers we want to advertise that IP to (PR #1171).
Kustomize configuration overlays. We now provide various overlays that implement different configuration degrees (as opposed to having) one single manifest. (PR #1254)
It’s now possible to store BGP passwords as secrets (as an alternative to plain text passwords). (PR #1264).
LoadBalancerClass support: it’s possible to have MetalLB listen only to services with the provided load balancer class to comply with kubernetes loadbalancer class. (PR 1417).
Helm Charts: optional annotations for PodMonitors and PrometheusRules (PR 1407)
Multiprotocol BGP support: it’s possible to expose ipv4 addresses via a router connected via ipv6 and viceversa. It was already possible with FRR mode in the v0.12.x version, but now the feature is covered by tests too (PR 1444).

Changes in behavior:

the biggest change is the introduction of CRDs and removing support for the configuration via ConfigMap. In order to ease the transition to the new configuration, we provide a conversion tool from ConfigMap to resources (see the “Backward compatibility” section from the main page).
the internal architecture was radically changed in order to accommodate CRDs, so please do not hesitate to file an issue.
The AvoidBuggyIPs flag was removed in order to reduce the api surface a bit. The same result can be achieved using ranges of IPs instead of the CIDR annotation.
The metallb images from dockerhub are deprecated. From this release, only the images on quay.io will be supported and updated. The official images can be found under the quay.io metallb organization.

Bug Fixes:

When sharing IPs, fail instead of silently assign a new IP when a service is changed and becomes incompatible because of the sharing key (PR #1230)
Restore compatibility with versions prior to 1.19 (PR #1238)
Set BGP origin code in igp (Native mode) (PR #1242)
Remove the endpoint slices deprecation log (PR #1020)
L2: skip interfaces that do have an assigned IP (PR #1347)
Logging: Avoid printing microseconds, fix the calling site for each log (PR #1351)
IPV6 / FRR: fix single hop ebgp next hop tracking (PR #1367)
Restore FRR to be pulled from dockerhub to support ARM (PR #1258)
A race condition happening when the speaker container was slower than the frr one was fixed (PR 1463)

This release includes contributions from Andrea Panattoni, Carlos Goncalves, Federico Paolinelli, jay vyas, Joshua Carnes, liornoy, Mani Kanth, manu, Mateusz Gozdek, Mathieu Parent, Matt Layher, mkeppel@solvinity.com, Mohamed Mahmoud, Ori Braunshtein, Periyasamy Palanisamy, Rodrigo Campos, Sabina Aledort, Scott Laird, Stefan Coetzee, Tyler Auerbeck, zhoujiao. Thank you!

Version 0.12.1

Bug Fixes:

(helm chart) FRR mode disabled by default as the FRR mode is still experimental (can be optionally enabled). (PR #1222)

Version 0.12.0

New Features:

Experimental FRR mode is now available. In this mode, the BGP stack is handled by a FRR container in place of the native BGP implementation. This offers additional capabilities such as IPv6 BGP announcement and BFD support. See the installation section on how to enable it. (PR #832, PR #935, PR #958, PR #1014 and others)
Dual stack services are now supported. L2 works out of the box, BGP requires the FRR mode because of missing IPv6 support in the native implementation. (PR #1065)
In FRR mode, it is possible to have a BGP session paired with a BFD session for quicker path failure detection. (PR #927) (PR #967)
A new manifest (manifests/metallb-frr.yaml) is available to deploy metallb in FRR mode (PR #1014)
(helm chart) Add support for deploying MetalLB in FRR mode. (PR #1073)
(helm chart) Allow specification of priorityClassName for speaker and controller. (PR #1099)

Changes in behavior:

The new FRR mode comes with limitations, compared to the native implementation. The most notable are:
- It is not allowed to have different peers sharing the same ip address but different ports
- It is not allowed to have different routerID or different myAsn for different peers. It is allowed to override the routerID and/or myAsn, but the value must be the same for all the peers.
- In case the BGP peer is multiple hops away from the nodes, the new ebgp-multihop flag must be set.
When switching to FRR mode, the FRR image will required to be downloaded, which may require a longer rollout time than usual. Also, please note that the migration path from native BGP to FRR was not explicitly tested.

Bug Fixes:

If a configmap is marked as stale because removing an pool used by a service, metallb tries to reprocess it periodically until the service is deleted or changed. (PR #1028, PR #1166)
Controller panic when updating the address pool of a service and specifying spec.loadBalancerIP from the new address pool (PR #1168)

Version 0.11.0

New Features:

Leveled logging is now supported. You can set --log-level flag to one of all, debug, info, warn, error or none to filter produced logs by level. The default value is set to info on both helm charts and k8s manifests. (PR #895)
MetalLB previously required the speaker to run on the same node as a pod backing a LoadBalancer, even when the ExternalTrafficPolicy was set to cluster. You may now run the MetalLB speaker on a subset of nodes, and the LoadBalancer will work for the cluster policy, regardless of where the endpoints are located. (PR #976)
It is now possible to configure the source address used for BGP sessions. (PR #902)
A new config flag has been added to allow disabling the use of Kubernetes EndpointSlices. (PR #937)
A new manifest, prometheus-operator.yaml is now included with MetalLB to help set up the resources necessary to allow Prometheus to gather metrics from the MetalLB services. (PR #960)
(helm chart) Add support for specifying additional labels for PodMonitor and PrometheusRule resources. This is needed when using the Prometheus operator and have it configured to use PodMonitors and PrometheusRules that are using a specific label. (PR #886)

Changes in behavior:

With the newly introduced leveled logging support, the default value for the --log-level is set to info on both helm charts and k8s manifests. This will produce fewer logs compared to the previous releases, since many debug level logs will be filtered out. You can preserve the old verbosity by editing the k8s manifests and setting the argument --log-level=all for both the controller and speaker when installing using manifests, or by overriding helm values controller.logLevel=all and speaker.logLevel=all when installing with Helm. (PR #895)
The L2 node allocation logic is now using the LoadBalancer IP and not the service name. This means that the node associated to a given service may change across releases. This would affect established connections as a new GARP will sent out to announce the IP belonging to the new node. (PR #976)

Bug Fixes:

L2 mode now allows to announce from nodes where the speaker is not running from in case of ExternalTrafficPolicy = Cluster. The association of the node to the service is done via the LoadBalancerIP, avoiding scenarios where two services sharing the same IP are announced from different nodes. (Issue #968) (Issue #558) (Issue #315)
Multi-arch images have been fixed to ensure the included busybox is based on the target platform architecture instead of the build platform architecture. Previously this made debugging these running containers more difficult as the included tools were not usable. (Issue #618)

This release includes contributions from alphabet5, Andrea Panattoni, Brian_P, Carlos Goncalves, Federico Paolinelli, Graeme Lawes, HeroCC, Ian Roberts, Lior Noy, Marco Geri, Mark Gray, Matthias Linhuber, Mohamed S. Mahmoud, Ori Braunshtein, Periyasamy Palanisamy, Pumba98, rata, Russell Bryant, Sabina Aledort, Shivamani Patil, Tyler Auerbeck, Viktor Oreshkin. Thank you!

Version 0.10.3

Bug Fixes:

Add fsGroup to the MetalLB controller deployment to address compatibility with Kubernetes 1.21 and later. See Kubernetes issue #70679. This ensures the MetalLB controller can read the service account token volume. (Issue #890)
helm: fix validation of imagePullSecrets (Issue #897)
Resolve issue in EndpointSlice support that caused excessive log spam. (Issue #899) (Issue #901) (Issue #978)
layer2: Fix a race condition when sending gratuitous ARP or NDP messages where an error on a removed interface would cause MetalLB to skip sending the same message out on the rest of the list of interfaces. (Issue #681)

Version 0.10.2

Bug Fixes:

Fix a missing RBAC update in the manifests used by the helm chart. (Issue #878)

Version 0.10.1

Bug Fixes:

Fix the images in manifests/metallb.yaml to refer to the images for the release tag instead of the main branch. (Issue #874)

Version 0.10.0

New Features:

Helm Charts are now provided. You should be able to migrate from Bitnami Charts to MetalLB Charts by just changing the repo and upgrading. For more details, see the installation documentation.
Version 0.9.x required the creation of a Secret called memberlist. This Secret is now automatically created by the MetalLB controller if it does not already exist. To use this feature you must set the new ml-secret-name and deployment options or METALLB_ML_SECRET_NAME and METALLB_DEPLOYMENT environment variables. This is already done in the manifests provided with this release.
Endpoint Slices support. Endpoint slices are the proposed and more scalable way introduced in k8s to find services endpoints. From this version, MetalLB checks for EndpointSlices availability and uses them, otherwise it backs up to endpoints.

Changes in behavior:

The port option to the speaker, which is the prometheus metrics port, now defaults to port 7472. This was already the default in the manifests included with MetalLB, but the binary itself previously defaulted to port 80.
The config-ns option of both the controller and the speaker and the ml-namespace option and METALLB_ML_NAMESPACE environment variable of the speaker are replaced by the namespace option or the METALLB_NAMESPACE environment variable. If not set the namespace is read from /var/run/secrets/kubernetes.io/serviceaccount/namespace.

This release includes contributions from Adit Sachde, Adrian Goins, Andrew Grosser, Brian Topping, Chance Carey, Chris Tarazi, Damien TOURDE, David Anderson, Dax McDonald, dougbtv, Etienne Champetier, Federico Paolinelli, Graeme Lawes, Henry-Kim-Youngwoo, Igal Serban, Jan Krcmar, JinLin Fu, Johannes Liebermann, Jumpy Squirrel, Lars Ekman, Leroy Shirto, Mark Gray, NorthFuture, Oleg Mayko, Reinier Schoof, Rodrigo Campos, Russell Bryant, Sebastien Dionne, Stefan Lasiewski, Steven Follis, sumarsono, Thorsten Schifferdecker, toby cabot, Tomofumi Hayashi, Tony Perez, and Yuan Liu. Thank you!

Release Notes

Version 0.14.9

Features

Bugs or Regression

Documentation

Version 0.14.8

Feature

Bug fixes

Version 0.14.7

Bug fixes

Version 0.14.6

Feature

Documentation

Bug or Regression

Version 0.14.5

Version 0.14.4

Version 0.14.3

Version 0.14.2

Version 0.13.12

Version 0.13.11

Version 0.13.10

Version 0.13.9

Version 0.13.7

Version 0.13.6

Version 0.13.5

Version 0.13.4

Version 0.13.3

Version 0.13.2

Version 0.12.1

Version 0.12.0

Version 0.11.0

Version 0.10.3

Version 0.10.2

Version 0.10.1

Version 0.10.0

Version 0.9.6

Version 0.9.5

Version 0.9.4

Version 0.9.3

Version 0.9.2

Versions 0.9.0 and 0.9.1

Version 0.8.3

Version 0.8.2

Version 0.8.1

Version 0.8.0

Version 0.7.3

Version 0.7.2

Version 0.7.1

Version 0.7.0

Version 0.6.2

Version 0.6.1

Version 0.6.0

Version 0.5.0

Version 0.4.6

Version 0.4.5

Version 0.4.4

Version 0.4.3

Version 0.4.2

Version 0.4.1

Version 0.4.0

Version 0.3.1

Version 0.3.0

Version 0.2.1

Version 0.2.0

Version 0.1.0