Uploaded image for project: 'OpenShift Core Networking'
  1. OpenShift Core Networking
  2. CORENET-6666

[REVIEW] Transition Multi-network Policy away from iptables (GA)

XMLWordPrintable

    • Transition Multi-network Policy away from iptables (GA)
    • To Do
    • Product / Portfolio Work
    • 100% To Do, 0% In Progress, 0% Done
    • False
    • Hide

      None

      Show
      None
    • False
    • M
    • 5

      OCP/Telco Definition of Done
      Epic Template descriptions and documentation.

      <--- Cut-n-Paste the entire contents of this description into your new Epic --->

      Epic Goal

      • The default Multi-NetworkPolicy backend will be changed to the new nftables backend.
      • The code in the main branch of openshift/multus-networkpolicy repository will transition from the iptables backend to the nftables soon after branch cutoff (release-4.22).
      • In doing so, we avoid the administrative work of productizing a new container image in OpenShift, which historically has been a long process.
      • The nftables backend will be promoted to General Availability (GA) status.
      • No API parameter will be added to the Cluster Network Operator (CNO) to allow users to revert to the iptables backend. Any regression bugs discovered in the nftables backend will be addressed directly, without offering an option to switch back to iptables.

      Why is this important?

      • iptables is deprecated in RHEL 9 and removed in RHEL 10.

      Scenarios

      1. ...

      Acceptance Criteria

      • CI - MUST be running successfully with tests automated
      • Release Technical Enablement - Provide necessary release enablement details and documents.
      • ...

      Dependencies (internal and external)

      1. NP-804

      Previous Work (Optional):

      1. CNF-11012

      Open questions::

      1. ...

      Done Checklist

      • CI - CI is running, tests are automated and merged.
      • Release Enablement <link to Feature Enablement Presentation>
      • DEV - Upstream code and tests merged: <link to meaningful PR or GitHub Issue>
      • DEV - Upstream documentation merged: <link to meaningful PR or GitHub Issue>
      • DEV - Downstream build attached to advisory: <link to errata>
      • QE - Test plans in Polarion: <link or reference to Polarion>
      • QE - Automated tests merged: <link or reference to automated tests>
      • DOC - Downstream documentation merged: <link to meaningful PR>

              Unassigned Unassigned
              carlosgoncalves Carlos Goncalves
              None
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: