Policy
Rule coverage for endpoints was timing-dependent (E-96488)
Endpoints did not correctly display allowed connections. This was caused by the transient nature of the endpoint's network affiliation. Rules are evaluated if two workloads are co-resident on a network. This issue is resolved. A missing network on an endpoint is now interpreted as being on the same network.
Container updates do not trigger policy updates in other PCEs in a Supercluster (E-95714)
Under certain conditions, changes to container workloads in one PCE in a Supercluster did not lead to policy updates on workloads paired to other PCEs in the Supercluster This issue is now resolved.
Incorrect policies on workloads for Avi load balancer (E-95516)
Workloads that were paired to a PCE other than the leader PCE of a supercluster did not receive the correct policies to communicate with Avi load balancers. This issue is resolved.