mirror of
https://github.com/YuzuZensai/netbird-kubernetes-operator.git
synced 2026-09-13 10:49:15 +00:00
7744dc08f5
Bumps [github.com/netbirdio/netbird](https://github.com/netbirdio/netbird) from 0.70.4 to 0.71.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/netbirdio/netbird/releases">github.com/netbirdio/netbird's releases</a>.</em></p> <blockquote> <h2>v0.71.2</h2> <h2>What's Changed</h2> <ul> <li>[management] Avoid peer IP reallocation when account settings update preserves the network range by <a href="https://github.com/lixmal"><code>@lixmal</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6173">netbirdio/netbird#6173</a></li> <li>[management] Avoid context cancellation in <code>cancelPeerRoutines</code> by <a href="https://github.com/mlsmaycon"><code>@mlsmaycon</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6175">netbirdio/netbird#6175</a></li> <li>[client] Clean up legacy 32-bit and HKCU registry entries on Windows install by <a href="https://github.com/lixmal"><code>@lixmal</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6176">netbirdio/netbird#6176</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netbirdio/netbird/compare/v0.71.1...v0.71.2">https://github.com/netbirdio/netbird/compare/v0.71.1...v0.71.2</a></p> <h2>v0.71.1</h2> <h2>What's Changed</h2> <ul> <li>[client] Mirror v4 exit selection onto v6 pair and honour SkipAutoApply per route by <a href="https://github.com/lixmal"><code>@lixmal</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6150">netbirdio/netbird#6150</a></li> <li>[client] Drop DNS probes for passive health projection by <a href="https://github.com/lixmal"><code>@lixmal</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/5971">netbirdio/netbird#5971</a></li> <li>[proxy] auth token generation on mapping by <a href="https://github.com/crn4"><code>@crn4</code></a> in <a href="https://redirect.github.com/netbirdio/netbird/pull/6157">netbirdio/netbird#6157</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/netbirdio/netbird/compare/v0.71.0...v0.71.1">https://github.com/netbirdio/netbird/compare/v0.71.0...v0.71.1</a></p> <h2>v0.71.0</h2> <h2>Release Notes for v0.71.0</h2> <h3>What's New</h3> <p><strong>IPv6 overlay addressing</strong> NetBird's overlay is now dual-stack. Every account gets its own IPv6 prefix (default <code>/64</code>, configurable from <code>/48</code> to <code>/120</code>), and peers can receive both an IPv4 and an IPv6 overlay address. DNS serves AAAA and reverse PTR records alongside A records, ACLs apply to both families automatically, network routes accept IPv6 CIDRs (with masquerade), exit nodes that route <code>0.0.0.0/0</code> get a matching <code>::/0</code> route, and domain routes resolve both A and AAAA.</p> <p>Rollout is group-gated: new accounts enable IPv6 for the <strong>All</strong> group by default; existing accounts opt in under <strong>Settings > Network</strong>. Assignment is also gated on a per-peer capability, so older clients keep working on IPv4 until they upgrade. Hosts can opt out individually with <code>netbird up --disable-ipv6</code></p> <p>Read more in the <a href="https://netbird.io/knowledge-hub/ipv6-overlay-addressing">IPv6 Overlay Addressing announcement</a> and the <a href="https://docs.netbird.io/manage/settings/ipv6">IPv6 documentation</a>. <a href="https://redirect.github.com/netbirdio/netbird/pull/5631">netbirdio/netbird#5631</a> by <a href="https://github.com/lixmal"><code>@lixmal</code></a></p> <p><strong>MFA for local users</strong> Local users (non-IdP) can now enable multi-factor authentication, closing a gap for deployments that don't federate auth through an external provider. <a href="https://redirect.github.com/netbirdio/netbird/pull/5804">netbirdio/netbird#5804</a> by <a href="https://github.com/jnfrati"><code>@jnfrati</code></a></p> <p><strong>Bring your own proxy (backend ready)</strong> Backend support for per-account reverse-proxy lifecycle has landed: proxy tokens, per-account cluster allow-lists, conflict detection, and one-proxy-per-account enforcement. Full rollout (dashboard, docs) comes in a later release. <a href="https://redirect.github.com/netbirdio/netbird/pull/5627">netbirdio/netbird#5627</a> by <a href="https://github.com/crn4"><code>@crn4</code></a></p> <h4>Client Improvements</h4> <ul> <li>Included <strong>MTU and SSH auth config in debug bundle</strong> by <a href="https://github.com/lixmal"><code>@lixmal</code></a>. <a href="https://redirect.github.com/netbirdio/netbird/pull/6071">netbirdio/netbird#6071</a></li> <li>Added <strong>public key to debug bundle config.txt</strong> by <a href="https://github.com/lixmal"><code>@lixmal</code></a>. <a href="https://redirect.github.com/netbirdio/netbird/pull/6092">netbirdio/netbird#6092</a></li> <li>iOS: <strong>structured ResolvedIPs collection for domain routes</strong> by <a href="https://github.com/pappz"><code>@pappz</code></a>. <a href="https://redirect.github.com/netbirdio/netbird/pull/6090">netbirdio/netbird#6090</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/netbirdio/netbird/commit/3f91f49277e1841bdfccda06ae7baa0430e6de2e"><code>3f91f49</code></a> Clean up legacy 32-bit and HKCU registry entries on Windows install (<a href="https://redirect.github.com/netbirdio/netbird/issues/6176">#6176</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/347c5bf317794729a044ce9f866f29e357d386d9"><code>347c5bf</code></a> Avoid context cancellation in <code>cancelPeerRoutines</code> (<a href="https://redirect.github.com/netbirdio/netbird/issues/6175">#6175</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/22e2519d7113dffec718198e54474cc0a6d71c87"><code>22e2519</code></a> [management] Avoid peer IP reallocation when account settings update preserve...</li> <li><a href="https://github.com/netbirdio/netbird/commit/e916f12cca508dfea584e7b72cf99a135acebc2b"><code>e916f12</code></a> [proxy] auth token generation on mapping (<a href="https://redirect.github.com/netbirdio/netbird/issues/6157">#6157</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/9ed2e2a5b463077f8abe3e3926695f5dc9411e29"><code>9ed2e2a</code></a> [client] Drop DNS probes for passive health projection (<a href="https://redirect.github.com/netbirdio/netbird/issues/5971">#5971</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/2ccae7ec479c106efb6d7a7edff4bb55affb2aa4"><code>2ccae7e</code></a> [client] Mirror v4 exit selection onto v6 pair and honour SkipAutoApply per r...</li> <li><a href="https://github.com/netbirdio/netbird/commit/07e5450117dd0451aaeefc18729a822115587e69"><code>07e5450</code></a> [management] Bracket IPv6 reverse-proxy target hosts when building URL Host f...</li> <li><a href="https://github.com/netbirdio/netbird/commit/3f914090cbb345707a88b5edb20d9c1351873b4c"><code>3f91409</code></a> [client] Bracket IPv6 in embed listeners, expand debug bundle (<a href="https://redirect.github.com/netbirdio/netbird/issues/6134">#6134</a>)</li> <li><a href="https://github.com/netbirdio/netbird/commit/ea9fab4396fc5513f7c62e3465dd361dc8bb9e91"><code>ea9fab4</code></a> [management] Allocate and preserve IPv6 overlay addresses for embedded proxy ...</li> <li><a href="https://github.com/netbirdio/netbird/commit/77b479286e399660ef2bdcbe7983363946660574"><code>77b4792</code></a> [management] fix offline statuses for public proxy clusters (<a href="https://redirect.github.com/netbirdio/netbird/issues/6133">#6133</a>)</li> <li>Additional commits viewable in <a href="https://github.com/netbirdio/netbird/compare/v0.70.4...v0.71.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Philip Laine <philip.laine@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
NetBird Kubernetes Operator
The NetBird Kubernetes Operator automates the provisioning of NetBird network access for services running in your cluster. It extends the Kubernetes API with CRDs, letting you manage NetBird peers, routes, and groups declaratively, the same way you manage the rest of your infrastructure.
Features
- Declarative peer management - define NetBird peers as Kubernetes resources and let the operator handle provisioning and lifecycle
- Automatic secret management - setup keys and credentials are stored and rotated as Kubernetes secrets
- Namespace-scoped or cluster-wide - deploy per-namespace for multi-tenant clusters or cluster-wide for full coverage
- Works with any NetBird deployment - compatible with NetBird Cloud and self-hosted instances
Getting Started
For full setup instructions, see the Getting Started documentation.
Once your secret is configured, install the operator with Helm.
helm upgrade --install --create-namespace -n netbird netbird-operator oci://ghcr.io/netbirdio/helm-charts/netbird-operator
API
| Kind | API Version |
|---|---|
| Group | netbird.io/v1alpha1 |
| NetworkResource | netbird.io/v1alpha1 |
| NetworkRouter | netbird.io/v1alpha1 |
| SetupKey | netbird.io/v1alpha1 |
| SidecarProfile | netbird.io/v1alpha1 |