-
Story
-
Resolution: Done
-
Blocker
-
None
-
None
-
None
-
None
-
Strategic Product Work
-
False
-
None
-
False
-
OCPSTRAT-1248 - Native Network Isolation for Namespaces
-
---
-
-
-
SDN Sprint 255
-
0
-
0
This card tracks the major chunk of the foundational work to support user defined primary network in OVNK of type "L3" -> use the existing L3 secondary controller logic here to change our default network controller to make the necessary changes
Goal of the card is to Implement the following workflow:
* if feature gate is enabled take action on NAD events created with "primaryNetwork:true"
* validate namespace doesn't have existing pods - if so, error out and emit event to warn user
* validate namespace doesn't have more than 1 NAD - if so error out
* validate all fields in the NAD
* finally if all is well annotate the namespace with "k8s.ovn.org/active-network: l3-network" ;
* then check if this same "named" NAD annotation is already present on other namespaces; if so - the topology already exists; nothing to do
* add routes to sway all default traffic for L2/L3 via user defined network
* DO NOT WORRY ABOUT NORTH-SOUTH logic in this card. There will be follow-up card for that
** Add e2e tests for pod east-west on user-defined network - meaning run existing conformance for pods on the new network*
** NOTE: This traffic flow is the same for both gateway modes, so make sure to test on both*
{}End goal here is: Only add support for east-west on user-defined network for the pods. Other things will have other cards. Please work with other assignee as a "pod-design-sub-group" so that you also have your potential reviewer in your group.{}
- blocks
-
SDN-4938 [L3/L2] [CNI Pods] [SGW] Add support for Pods->Egress Traffic on user-defined primary networks
- Closed
-
SDN-4940 [L3] [CNI Pods] Ensure Native Isolation of pods in user-defined network from default network
- Closed
- is blocked by
-
SDN-4935 [NAD] Add support for "primaryNetwork": true field in the NAD config
- Closed
- is cloned by
-
SDN-4954 [L2] [CNI Pods] Add support for user-defined primary networks: Pods-East-West Traffic
- Closed