v1.15.23

v1.15.23 (2026-08-12)

This release adds bounded BFD session recovery for VPC Egress Gateways, makes controller leader election timings configurable, regenerates the Kubernetes API code, and updates Go dependencies.

Both Helm charts use kubeovn/kube-ovn:v1.15.23-dpdk for hybrid DPDK deployments. The next patch build tag kubeovn/kube-ovn-base:v1.15.24-dpdk has also been published from the v1.15.23-dpdk base image.

• ddb4413bb release v1.15.23
• fe36f9020 [reelase-1.15] fix(gateway): add bounded BFD session recovery (#7208)
• 57cba9f6a Update golang (#7213)
• 83b04d632 fix(deps): update module golang.org/x/mod to v0.39.0 (#7207)
• ec82a2e6b chore(codegen): regenerate Kubernetes API code (#7193)
• 9b2232343 [release-1.15] feat: make controller leader election timings configurable (#7178)
• 354dc594d prepare for next release

Contributors

• renovate[bot]
• zhangzujian
• 张祖建

v1.15.22

v1.15.22 (2026-08-07)

Both Helm charts now use kubeovn/kube-ovn:v1.15.22-dpdk for hybrid DPDK deployments.

• 05dfb2558 release v1.15.22
• 59f26cdf3 fix(cni): refresh IPv6 neighbor caches (#7140)
• d467e6d69 [release-1.15] fix(ovn-central): tolerate transient duplicate leaders (#7145)
• 8c0107b44 [release-1.15] fix(gateway): harden bfdd control operations (#7143)
• c21e65cb7 fix: use fully qualified CRD names in cleanup.sh
• 592581b3b ci: pin Kamaji chart download (#7133)
• d31219ed4 [release-1.15] ci: add hosted OVN central e2e coverage (#7126)
• bc32c3bf4 prepare for next release

Contributors

• Hadi
• zhangzujian
• 张祖建

v1.15.21

v1.15.21 (2026-08-04)

• 49e74eff7 release v1.15.21
• a55f5959e [release-1.15] feat(vpc-egress-gateway): accept bandwidth quantities (#7124)
• add6eef33 [release-1.15] fix(ovn-central): recover from invalid raft headers (#7122)
• a9cd30f68 [release-1.15] fix(ipam): preserve IP pool allocation state (#7114)
• e61ad3298 prepare for next release

Contributors

• zhangzujian
• 张祖建

v1.15.20

v1.15.20 (2026-07-28)

• 81e594023 release v1.15.20
• 6b271f3e0 [release-1.15] fix(metallb): preserve internal underlay VIP traffic (#7066)
• b9229726f feat: infer pod subnet from named IPPool (#7083)
• 69b6ba9f7 fix(deps): update vulnerable Go modules (#7079)
• 3455ec1ac [release-1.15] fix(chart): correct v2 agent capability name (#7075)
• c6b5e381b Revert "fix: prevent subnet status update loop in patchSubnetStatus (#7058)" (#7069)
• fee5e3f53 fix(controller): extend BFD liveness probe timeout (#7064)
• 8dd20f7da fix: prevent subnet status update loop in patchSubnetStatus (#7058)
• 9f779e9f2 fix(gateway): recover missing BFD sessions (#7051)
• 44b993bf6 fix(chart): correct ovs-ipsec-keys volume indentation and Talos IPSEC docs (#7041)
• 88b440446 fix ipam only ip leak (#7034)
• 4856c9a1b ci: clean up chart releases and keep latest release correct (#7032)
• e98bc1d17 prepare for next release

Contributors

• Abdd
• Aleksei Sviridkin
• Mengxin Liu
• changluyi
• xieyanker
• zhangzujian
• 张祖建

v1.15.19

v1.15.19 (2026-07-10)

• 247189e75 release v1.15.19
• 6dbb738a5 fix: bump GoBGP to v4.7.0 (#7030)
• c278ae416 [release-1.15] chart: support HCP ovn-central scheduling (#7013)
• aebb90a35 fix(deps): update module golang.org/x/tools to v0.48.0 (#7024)
• ff8961b14 fix(deps): update golang (#7022)
• 977ac3c7b fix(deps): update golang (#7017)
• 43a0667d5 fix: drop orphan centralized nat outgoing tcp packets (#7000)
• c4efb3c72 chore(deps): update dependency go to v1.26.5 (#7012)
• 7cc777720 build: add OCI labels to images (#7008)
• 1f5f7dc51 prepare for next release

Contributors

• Mengxin Liu
• renovate[bot]
• 张祖建

v1.15.18

v1.15.18 (2026-07-07)

• 2ae3cf5c5 release v1.15.18
• 701125fbc [release-1.15] feat: support HCP ovn-central chart deployment (#6993)
• 1bf35be6b chore(deps): update module golang.org/x/text to v0.39.0 (#7003)
• d300cf2f9 fix: restore ip_src hash for policy route ECMP (#6997)
• 73b760abe fix(kubectl-ko): honor KUBE_OVN_NS instead of hardcoded kube-system namespace (#6992)
• 009176cdf fix: reject subnet gateway static IP allocation (#6981)
• 400168fcb fix: require subnet for attachment provider (#6966)
• d61772e51 feat: configure OVN DB server TLS options (#6977)
• 2e3397465 fix veg init for mismatched IP families (#6963)
• 2a57edc69 prepare for next release

Contributors

• Mengxin Liu
• changluyi
• dmitriy-bty
• renovate[bot]
• 张祖建

v1.15.17

v1.15.17 (2026-07-01)

• 5287d63c2 release v1.15.17
• 2acdac085 fix: skip non-security-group port groups in sg gc (#6961)
• b64752b09 fix vpc egress local policy without bfd (#6927)
• fe71bb3dc build: include ovs and ovn commits in version (#6945)
• 47de841fd feat: rotate kube-ovn TLS certificates (#6931)
• 5ec9e0dab prepare for next release

Contributors

• Mengxin Liu
• changluyi
• 张祖建

v1.15.16

v1.15.16 (2026-06-26)

• 726b8df0b release v1.15.16
• b881fdfc6 fix(deps): update module golang.org/x/tools to v0.47.0 (#6938)
• c776d03fa build: refresh kubectl golang.org/x deps and CNI plugin rebuilds (#6929)
• 5307cad85 prepare for next release

Contributors

• Mengxin Liu
• renovate[bot]
• 张祖建

v1.15.15

v1.15.15 (2026-06-22)

• 6c5e4b9e4 release v1.15.15
• 9245913a4 fix(deps): update containerd to v2.2.5 (#6916)
• 2c9e26bf6 fix: reconcile vpc bfd ha chassis on node changes (#6900)
• 13edea2d9 fix(ovs): make DeleteNat idempotent when target NAT row is absent (#6911)
• 0f298cb03 fix(ci): adapt dpdk base OVN to OVS nd API (#6895)
• b1130f7e7 fix(controller): enable ARP learning on VPC routers that have peerings (#6882)
• 946487ce4 fix(subnet): allow all-ones host as gateway for IPv6 subnet (#6883)
• 758e6ef64 prepare for next release

Contributors

• Apinant.u
• Mengxin Liu
• 张祖建

v1.14.41

v1.14.41 (2026-06-22)

• 779f18ea6 release v1.14.41
• fd6997467 fix(deps): update containerd to v2.2.5 (#6915)
• 4cee41d56 fix: reconcile vpc bfd ha chassis on node changes (#6899)
• d5fdd3d55 fix(ci): fetch pinned OVN for dpdk base (#6897)
• 853f53892 fix(ci): fetch pinned OVN commit directly (#6892)
• f7c4312cc fix(images): adapt OVN pinctrl to new OVS compose_nd_ns signature
• 65f7b001c prepare for next release

Contributors

• Mengxin Liu
• 张祖建