CORENET-6097: Add OVN BGP NoOverlay workflow for baremetal clusters - #73335
CORENET-6097: Add OVN BGP NoOverlay workflow for baremetal clusters#73335zhaozhanqi wants to merge 3 commits into
Conversation
openshift-ci-robot
added
the
rehearsals-ack
bf16951 to
93ee080
Compare
openshift-ci-robot
removed
the
rehearsals-ack
1a93f8f to
9ea69da
Compare
|
/payload-job-with-prs pull-ci-openshift-cluster-network-operator-master-e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-techpreview openshift/api#2537,openshift/cluster-network-operator#2844,openshift/ovn-kubernetes#2878,openshift/client-go#349 |
|
@zhaozhanqi: it appears that you have attempted to use some version of the payload command, but your comment was incorrectly formatted and cannot be acted upon. See the docs for usage info. |
9ea69da to
8c04bc5
Compare
|
/payload-job-with-prs periodic-ci-openshift-cluster-network-operator-master-e2e-metal-ipi-ovn-dualstack-bgp-lgw-no-overlay-test openshift/cluster-network-operator#2844 openshift/ovn-kubernetes#2878 openshift/client-go#349 |
|
@zhaozhanqi: the repo openshift/release does not contribute to the OpenShift official images, or the base branch is not currently having images promoted |
|
@zhaozhanqi: This PR was included in a payload test run from openshift/cluster-network-operator#2844 |
|
@zhaozhanqi: This PR was included in a payload test run from openshift/ovn-kubernetes#2920 |
8c04bc5 to
e9ff88f
Compare
openshift-ci
Bot
added
the
do-not-merge/work-in-progress
e9ff88f to
2e14735
Compare
openshift-ci-robot
added
the
rehearsals-ack
2e14735 to
230a4a8
Compare
|
/retitle CORENET-6097: Add OVN BGP NoOverlay workflow for baremetal clusters |
openshift-ci
Bot
changed the title
openshift-ci-robot
added
the
jira/valid-reference
|
@zhaozhanqi: This pull request references CORENET-6097 which is a valid jira issue. Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.22.0" version, but no target version was set. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
230a4a8 to
666c7d0
Compare
|
@zhaozhanqi: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
/pj-rehearse pull-ci-openshift-cluster-network-operator-master-e2e-metal-ovn-dualstack-no-overlay-unmanaged-snat-techpreview |
|
@zhaozhanqi: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
/pj-rehearse pull-ci-openshift-cluster-network-operator-master-e2e-metal-ovn-dualstack-no-overlay-unmanaged-snat-techpreview |
|
@zhaozhanqi: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
/pj-rehearse pull-ci-openshift-cluster-network-operator-master-e2e-metal-ovn-dualstack-no-overlay-unmanaged-snat-techpreview |
|
@zhaozhanqi: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
/pj-rehearse pull-ci-openshift-cluster-network-operator-master-e2e-metal-ovn-dualstack-no-overlay-unmanaged-snat-techpreview |
|
@zhaozhanqi: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
/pj-rehearse pull-ci-openshift-cluster-network-operator-master-e2e-metal-ovn-dualstack-no-overlay-unmanaged-snat-techpreview |
|
@zhaozhanqi: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
@CodeRabbit review |
Sound like this repo don't enable codeRabbit. |
|
/pj-rehearse pull-ci-openshift-cluster-network-operator-master-e2e-metal-ovn-dualstack-no-overlay-unmanaged-sgw-techpreview |
|
@zhaozhanqi: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
/pj-rehearse pull-ci-openshift-ovn-kubernetes-master-e2e-metal-ipi-ovn-dualstack-bgp-local-gw-techpreview |
|
@zhaozhanqi: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
There was a problem hiding this comment.
Are you sure you want to remove this line?
There was a problem hiding this comment.
thanks, this should be mistake update by 'make update', now it's clean
|
/pj-rehearse pull-ci-openshift-ovn-kubernetes-master-e2e-metal-ipi-ovn-dualstack-bgp-local-gw-techpreview pull-ci-openshift-cluster-network-operator-master-e2e-metal-ovn-dualstack-no-overlay-unmanaged-sgw-techpreview |
|
@MahnoorAsghar: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
This PR adds two workflows: - 'baremetalds-e2e-ovn-bgp-dualstack-local-gw-no-overlay' - 'baremetalds-e2e-ovn-bgp-dualstack-no-overlay' and two test lanes for no-overlay with routing mode: Unmanaged with outboundSNAT Disabled and Enabled: - e2e-metal-ovn-dualstack-no-overlay-managed-lgw-techpreview - e2e-metal-ovn-dualstack-no-overlay-unmanaged-sgw-techpreview Deploy cluster steps: 1. Sets up FRR route reflector container on the packet server before cluster installation 2. Creates network operator manifest with NoOverlay transport configuration 3. Configures FRRConfiguration to peer with external route reflector 4. Adds RouteAdvertisements manifest for PodNetwork 5. Configures nftables rules on the packet server when outboundSNAT is Disabled The baremetalds-e2e-ovn-bgp-nftables-pre ref step configures nftables rules required for NoOverlay with outboundSNAT Disabled and BGP routing on the bare metal host. The step uses a one-shot systemd service that waits for master VMs to appear before applying firewall rules. Key changes: - Stop and disable firewalld to prevent rule conflicts - Enable IP forwarding for NoOverlay routing - Remove ct state invalid drop rule from NETAVARK_FORWARD for overlay-free networking - Add FORWARD chain rules for dualstack (IPv4/IPv6) cluster network traffic - Add MASQUERADE rules for proper SNAT behavior on egress traffic - Add NAT RETURN rule to skip masquerading for cluster-to-pod traffic from bootstrap host This step is placed after no-overlay manifest creation and before cluster provisioning to ensure proper network configuration. Signed-off-by: zhaozhanqi <zzhao@redhat.com>
…s these resource already created in day0 for no-overlay
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: zhaozhanqi The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
/pj-rehearse pull-ci-openshift-cluster-network-operator-master-e2e-metal-ovn-dualstack-no-overlay-unmanaged-sgw-techpreview |
|
@zhaozhanqi: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
|
[REHEARSALNOTIFIER]
A total of 126 jobs have been affected by this change. The above listing is non-exhaustive and limited to 25 jobs. A full list of affected jobs can be found here Interacting with pj-rehearseComment: Once you are satisfied with the results of the rehearsals, comment: |
|
@zhaozhanqi: The following tests failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
|
Closing, please open a separate request if this work is still required. |
7 participants
Add OVN BGP NoOverlay workflow for baremetal clusters
This PR adds two workflows
and two lanes for no-overlay with routing mode: Unmanaged
also with outboundSNAT is Disabled and Enables
deploy clsuter steps:
The baremetalds-e2e-ovn-bgp-nftables-pre ref step to configure
nftables rules required for NoOverlay with outboundSNAT is Disabled and BGP routing on the
bare metal host. The step uses a systemd timer to ensure firewall rules
persist and self-heal throughout cluster lifecycle.
Key changes:
This step is placed after no-overlay manifest creation and before
cluster provisioning to ensure proper network configuration
Signed-off-by: zhaozhanqi zzhao@redhat.com