Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Critical
Fix Version/s: 4.12.z
Affects Version/s: 4.9.z
Component/s: Networking / ovn-kubernetes
Labels:
- FastFix

Test Coverage:

+
Test Link:
https://polarion.engineering.redhat.com/polarion/#/project/OSE/workitem?id=OCP-65901
Severity:
Important
Regression:
None
Release Blocker:
Rejected
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Target Version:

4.12.0

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

PX Impact Score:
PX Priority Data:

Description of problem:

With every pod update we are executing a mutate operation to add the pod port to the port group or add the pod IP to an address set. This functionally doesn't hurt, since mutate will not add duplicate values to the same set. However, this is bad for performance. For example, with a 730 network policies affecting a pod, and issuing 7 pod updates would result in over 5k transactions.

clones

OCPBUGS-4659 Network Policy executes duplicate transactions for every pod update

Closed

depends on

OCPBUGS-4659 Network Policy executes duplicate transactions for every pod update

Closed

is cloned by

OCPBUGS-4860 [4.11] Network Policy executes duplicate transactions for every pod update

Closed

is depended on by

OCPBUGS-4860 [4.11] Network Policy executes duplicate transactions for every pod update

Closed

links to

openshift/ovn-kubernetes#1439: OCPBUGS-4760: Avoid duplicate transactions and minimize handlers with empty namespace selectors

Assignee:: Tim Rozet

Reporter:: Tim Rozet

QA Contact:: Anurag Saxena

Contributors:: Arti Sood

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Created:: 2022/12/12 8:58 PM

Updated:: 2024/02/15 2:57 PM

Resolved:: 2023/01/17 7:43 PM