Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-4860

[4.11] Network Policy executes duplicate transactions for every pod update

    XMLWordPrintable

Details

    • Important
    • Rejected
    • Hide

      None

      Show
      None

    Description

      Description of problem:

      With every pod update we are executing a mutate operation to add the pod port to the port group or add the pod IP to an address set. This functionally doesn't hurt, since mutate will not add duplicate values to the same set. However, this is bad for performance. For example, with a 730 network policies affecting a pod, and issuing 7 pod updates would result in over 5k transactions.

      Attachments

        Issue Links

          clones

          Bug - A problem which impairs or prevents the functions of the product. OCPBUGS-4760 [4.12] Network Policy executes duplicate transactions for every pod update

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed
          depends on

          Bug - A problem which impairs or prevents the functions of the product. OCPBUGS-4760 [4.12] Network Policy executes duplicate transactions for every pod update

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed
          is cloned by

          Bug - A problem which impairs or prevents the functions of the product. OCPBUGS-4861 [4.10] Network Policy executes duplicate transactions for every pod update

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed
          is depended on by

          Bug - A problem which impairs or prevents the functions of the product. OCPBUGS-4861 [4.10] Network Policy executes duplicate transactions for every pod update

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed
          links to

          GitHub openshift/ovn-kubernetes#1447: OCPBUGS-4860: [release-4.11]Avoid duplicate transactions and minimize handlers with empty namespace selectors

          Activity

            Public project attachment banner

              context keys: [headless, issue, helper, isAsynchronousRequest, project, action, user]
              current Project key: OCPBUGS

              People

                trozet@redhat.com Tim Rozet
                trozet@redhat.com Tim Rozet
                Anurag Saxena Anurag Saxena
                Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: