-
Story
-
Resolution: Done
-
Critical
-
None
-
None
-
None
-
Strategic Product Work
-
False
-
None
-
False
-
OCPSTRAT-1248 - Native Network Isolation for Namespaces
-
---
-
-
-
SDN Sprint 255
-
0
-
0
See L140-L156 in KEP: NOTE that NAD itself is a JSON, no change is needed there, we only need this change to OVNK's validation of the json config blob.
Goal of this card:
- add support for parsing "primaryNetwork" field in https://github.com/ovn-org/ovn-kubernetes/blob/master/go-controller/pkg/util/multi_network.go
- add tests for correct/wrong parsing in https://github.com/ovn-org/ovn-kubernetes/blob/master/go-controller/pkg/util/multi_network_test.go
- add logic for existing NADs for secondary networks during upgrades to update this field to "false" - actually this might not be necessary, this key won't exist for secondary networks is my guess, I'll leave this to the card owner to figure out
- either ways we need validation to ensure secondary network NADs can't have this field set to true etc
You don't need to start using the field yet, the changes can land independently since tests will ensure deadcode linter doesn't get tagged.
- blocks
-
SDN-4937 [L3] [CNI Pods] Add support for user-defined primary networks: Pods-East-West Traffic
-
- Closed
-