Uploaded image for project: 'Network Edge'
  1. Network Edge
  2. NE-1105

Provide a solution for Gateway management by an operator

XMLWordPrintable

    • Icon: Epic Epic
    • Resolution: Done
    • Icon: Blocker Blocker
    • openshift-4.13.z
    • None
    • None
    • Provide a solution for Gateway management by an operator
    • BU Product Work
    • 8
    • False
    • None
    • False
    • Green
    • To Do
    • OCPSTRAT-416 - Gateway API using Istio for Cluster Ingress (Dev Preview)
    • OCPSTRAT-416Gateway API using Istio for Cluster Ingress (Dev Preview)
    • 0% To Do, 0% In Progress, 100% Done
    • 0
    • 0.000

      User Story: As a cluster admin, I want to create a gatewayclass and a gateway, and OpenShift should configure Istio/Envoy with an LB and DNS, so that traffic can reach httproutes attached to the gateway.

      The operator will be one of these (or some combination):

      • cluster-ingress-operator
      • OSSM operator
      • a new operator

      Functionality includes DNS (NE-1107), LoadBalancer (NE-1108), , and other operations formerly performed by the cluster-ingress-operator for routers.

      • configures GWAPI subcomponents
        • Installs GWAPI Gateway CRD
      • installs Istio (if needed) when Gateway and GatewayClasses are created

      Requires design document or enhancement proposal, breakdown into more specific stories.

      (probably needs to be an Epic, will move things around later to accomodate that).

       

      Out of scope for enhanced dev preview:

      • Unified Control Plane operations (NE-1095)
      • Installs RBAC that restricts who can configure Gateway and GatewayClasses 

            [NE-1105] Provide a solution for Gateway management by an operator

            Michael Fisher added a comment -

            Removing fixVersion openshift-4.13 from this epic because the GA release for this feature is in a future release. This epic reflects work needed for dev-preview. The plan and timeline for completing the dev-preview remains unchanged.

            Michael Fisher added a comment - Removing fixVersion openshift-4.13 from this epic because the GA release for this feature is in a future release. This epic reflects work needed for dev-preview. The plan and timeline for completing the dev-preview remains unchanged.

            Candace Holman added a comment -

            Proposal for operations

            1. Cluster ingress operator installs GWAPI Gateway CRD
            2. RBAC restricts who can configure Gateway and GatewayClasses 
            3. Cluster ingress operator watches Gateway creation
            4. Cluster ingress operator installs Istio when Gateway and GatewayClasses are created
            5. Cluster admin defines/creates GatewayClass (installing Istio)
            6. Cluster ingress operator watches Gateway creation and installs/configures Istio/Envoy and adds HTTPRroute CRD when/if needed
            7. Cluster ingress operator creates LB when needed (as before)
            8. Cluster ingress operator creates DNS based on LB (as before) (external-dns is a possibility)
            9. Users can now create HTTPRoutes
            10. Istio watches HTTPRoutes/Gateways and configures Envoy (as before)

            Candace Holman added a comment - Proposal for operations Cluster ingress operator installs GWAPI Gateway CRD RBAC restricts who can configure Gateway and GatewayClasses  Cluster ingress operator watches Gateway creation Cluster ingress operator installs Istio when Gateway and GatewayClasses are created Cluster admin defines/creates GatewayClass (installing Istio) Cluster ingress operator watches Gateway creation and installs/configures Istio/Envoy and adds HTTPRroute CRD when/if needed Cluster ingress operator creates LB when needed (as before) Cluster ingress operator creates DNS based on LB (as before) (external-dns is a possibility) Users can now create HTTPRoutes Istio watches HTTPRoutes/Gateways and configures Envoy (as before)

              mmasters1@redhat.com Miciah Masters
              cholman@redhat.com Candace Holman
              Candace Holman, Grant Spence (Inactive)
              Hongan Li Hongan Li
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: