Merge pull request #2537 from ricky-rav/no_overlay_api

CORENET-6390: API changes and feature gate for OVN-Kubernetes no-overlay mode

Author: openshift-merge-bot[bot]

features.md

@@ -80,6 +80,7 @@
 | NewOLM| | <span style="background-color: #519450">Enabled</span> | | <span style="background-color: #519450">Enabled</span> | | <span style="background-color: #519450">Enabled</span> | | <span style="background-color: #519450">Enabled</span>  |
 | NewOLMOwnSingleNamespace| | <span style="background-color: #519450">Enabled</span> | | <span style="background-color: #519450">Enabled</span> | | <span style="background-color: #519450">Enabled</span> | | <span style="background-color: #519450">Enabled</span>  |
 | NewOLMWebhookProviderOpenshiftServiceCA| | <span style="background-color: #519450">Enabled</span> | | <span style="background-color: #519450">Enabled</span> | | <span style="background-color: #519450">Enabled</span> | | <span style="background-color: #519450">Enabled</span>  |
+| NoOverlayMode| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span>  |
 | NutanixMultiSubnets| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span>  |
 | OSStreams| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span>  |
 | OVNObservability| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span>  |

features/features.go

@@ -202,6 +202,14 @@ var (
 					enable(inDevPreviewNoUpgrade()).
 					mustRegister()
 
+	FeatureGateNoOverlayMode = newFeatureGate("NoOverlayMode").
+				reportProblemsToJiraComponent("Networking/ovn-kubernetes").
+				contactPerson("pliurh").
+				productScope(ocpSpecific).
+				enhancementPR("https://github.com/openshift/enhancements/pull/1859").
+				enable(inDevPreviewNoUpgrade(), inTechPreviewNoUpgrade()).
+				mustRegister()
+
 	FeatureGateEVPN = newFeatureGate("EVPN").
 			reportProblemsToJiraComponent("Networking/ovn-kubernetes").
 			contactPerson("jcaamano").

openapi/generated_openapi/zz_generated.openapi.go

@@ -41847,6 +41847,25 @@
         }
       }
     },
+    "com.github.openshift.api.operator.v1.BGPManagedConfig": {
+      "description": "BGPManagedConfig contains configuration options for BGP when routing is \"Managed\".",
+      "type": "object",
+      "required": [
+        "bgpTopology"
+      ],
+      "properties": {
+        "asNumber": {
+          "description": "asNumber is the 2-byte or 4-byte Autonomous System Number (ASN) to be used in the generated FRR configuration. Valid values are 1 to 4294967295. When omitted, this defaults to 64512.",
+          "type": "integer",
+          "format": "int64",
+          "default": 64512
+        },
+        "bgpTopology": {
+          "description": "bgpTopology defines the BGP topology to be used. Allowed values are \"FullMesh\". When set to \"FullMesh\", every node peers directly with every other node via BGP. This field is required when BGPManagedConfig is specified.",
+          "type": "string"
+        }
+      }
+    },
     "com.github.openshift.api.operator.v1.BootImageSkewEnforcementConfig": {
       "description": "BootImageSkewEnforcementConfig is used to configure how boot image version skew is enforced on the cluster.",
       "type": "object",
@@ -46218,6 +46237,24 @@
         }
       }
     },
+    "com.github.openshift.api.operator.v1.NoOverlayConfig": {
+      "description": "NoOverlayConfig contains configuration options for networks operating in no-overlay mode.",
+      "type": "object",
+      "required": [
+        "outboundSNAT",
+        "routing"
+      ],
+      "properties": {
+        "outboundSNAT": {
+          "description": "outboundSNAT defines the SNAT behavior for outbound traffic from pods. Allowed values are \"Enabled\" and \"Disabled\". When set to \"Enabled\", SNAT is performed on outbound traffic from pods. When set to \"Disabled\", SNAT is not performed and pod IPs are preserved in outbound traffic. This field is required when the network operates in no-overlay mode. This field can be set to any value at installation time and can be changed afterwards.",
+          "type": "string"
+        },
+        "routing": {
+          "description": "routing specifies whether the pod network routing is managed by OVN-Kubernetes or users. Allowed values are \"Managed\" and \"Unmanaged\". When set to \"Managed\", OVN-Kubernetes manages the pod network routing configuration through BGP. When set to \"Unmanaged\", users are responsible for configuring the pod network routing. This field is required when the network operates in no-overlay mode. This field is immutable once set.",
+          "type": "string"
+        }
+      }
+    },
     "com.github.openshift.api.operator.v1.NodeDisruptionPolicyClusterStatus": {
       "description": "NodeDisruptionPolicyClusterStatus is the type for the status object, rendered by the controller as a merge of cluster defaults and user provided policies",
       "type": "object",
@@ -46734,6 +46771,11 @@
       "description": "ovnKubernetesConfig contains the configuration parameters for networks using the ovn-kubernetes network project",
       "type": "object",
       "properties": {
+        "bgpManagedConfig": {
+          "description": "bgpManagedConfig configures the BGP properties for networks (default network or CUDNs) in no-overlay mode that specify routing=\"Managed\" in their noOverlayConfig. It is required when noOverlayConfig.routing is set to \"Managed\". When omitted, this means the user does not configure BGP for managed routing. This field can be set at installation time or on day 2, and can be modified at any time.",
+          "default": {},
+          "$ref": "#/definitions/com.github.openshift.api.operator.v1.BGPManagedConfig"
+        },
         "egressIPConfig": {
           "description": "egressIPConfig holds the configuration for EgressIP options.",
           "default": {},
@@ -46772,6 +46814,11 @@
           "type": "integer",
           "format": "int64"
         },
+        "noOverlayConfig": {
+          "description": "noOverlayConfig contains configuration for no-overlay mode. This configuration applies to the default network only. It is required when transport is \"NoOverlay\". When omitted, this means the user does not configure no-overlay mode options.",
+          "default": {},
+          "$ref": "#/definitions/com.github.openshift.api.operator.v1.NoOverlayConfig"
+        },
         "policyAuditConfig": {
           "description": "policyAuditConfig is the configuration for network policy audit events. If unset, reported defaults are used.",
           "$ref": "#/definitions/com.github.openshift.api.operator.v1.PolicyAuditConfig"
@@ -46780,6 +46827,10 @@
           "description": "routeAdvertisements determines if the functionality to advertise cluster network routes through a dynamic routing protocol, such as BGP, is enabled or not. This functionality is configured through the ovn-kubernetes RouteAdvertisements CRD. Requires the 'FRR' routing capability provider to be enabled as an additional routing capability. Allowed values are \"Enabled\", \"Disabled\" and ommited. When omitted, this means the user has no opinion and the platform is left to choose reasonable defaults. These defaults are subject to change over time. The current default is \"Disabled\".",
           "type": "string"
         },
+        "transport": {
+          "description": "transport sets the transport mode for pods on the default network. Allowed values are \"NoOverlay\" and \"Geneve\". \"NoOverlay\" avoids tunnel encapsulation, routing pod traffic directly between nodes. \"Geneve\" encapsulates pod traffic using Geneve tunnels between nodes. When omitted, this means the user has no opinion and the platform chooses a reasonable default which is subject to change over time. The current default is \"Geneve\". \"NoOverlay\" can only be set at installation time and cannot be changed afterwards. \"Geneve\" may be set explicitly at any time to lock in the current default.",
+          "type": "string"
+        },
         "v4InternalSubnet": {
           "description": "v4InternalSubnet is a v4 subnet used internally by ovn-kubernetes in case the default one is being already used by something else. It must not overlap with any other subnet being used by OpenShift or by the node network. The size of the subnet must be larger than the number of nodes. Default is 100.64.0.0/16",
           "type": "string"