-
Epic
-
Resolution: Unresolved
-
Major
-
None
-
None
-
None
-
Transition Multi-network Policy away from iptables (GA)
-
To Do
-
Product / Portfolio Work
-
100% To Do, 0% In Progress, 0% Done
-
False
-
-
False
-
M
-
None
-
5
OCP/Telco Definition of Done
Epic Template descriptions and documentation.
<--- Cut-n-Paste the entire contents of this description into your new Epic --->
Epic Goal
- The default Multi-NetworkPolicy backend will be changed to the new nftables backend.
- The code in the main branch of openshift/multus-networkpolicy repository will transition from the iptables backend to the nftables soon after branch cutoff (release-4.22).
- In doing so, we avoid the administrative work of productizing a new container image in OpenShift, which historically has been a long process.
- The nftables backend will be promoted to General Availability (GA) status.
- No API parameter will be added to the Cluster Network Operator (CNO) to allow users to revert to the iptables backend. Any regression bugs discovered in the nftables backend will be addressed directly, without offering an option to switch back to iptables.
Why is this important?
- iptables is deprecated in RHEL 9 and removed in RHEL 10.
Scenarios
- ...
Acceptance Criteria
- CI - MUST be running successfully with tests automated
- Release Technical Enablement - Provide necessary release enablement details and documents.
- ...
Dependencies (internal and external)
Previous Work (Optional):
- CNF-11012
Open questions::
- ...
Done Checklist
- CI - CI is running, tests are automated and merged.
- Release Enablement <link to Feature Enablement Presentation>
- DEV - Upstream code and tests merged: <link to meaningful PR or GitHub Issue>
- DEV - Upstream documentation merged: <link to meaningful PR or GitHub Issue>
- DEV - Downstream build attached to advisory: <link to errata>
- QE - Test plans in Polarion: <link or reference to Polarion>
- QE - Automated tests merged: <link or reference to automated tests>
- DOC - Downstream documentation merged: <link to meaningful PR>
- duplicates
-
CORENET-663 multi-networkpolicy support nftables backend
-
- Closed
-