Milestone v0.10.0 planning

[draychev]

This GitHub issue is to be used for planning Open Service Mesh release v0.10.0

---

Previous planning: Milestone v0.9.0 planning #2611

[draychev]

Delyan's proposal for v0.10

Grouped by Theme:

Retry

• (root) retries: Create a Proof-of-Concept for OSM Retry feature (root) retries: Create a Proof-of-Concept for OSM Retry feature #3338
  • retries: Read annotations from TrafficTarget SMI policy retries: Read annotations from TrafficTarget SMI policy #3339
  • retries: Propagate Retry Policy Config to Envoy proxies retries: Propagate Retry Policy Config to Envoy proxies #3340
  • retries: Create minimal demo of the Retry feature retries: Create minimal demo of the Retry feature #3341

MeshConfig

• Update OSM Demo to accommodate MeshConfig changes. Update OSM Demo to accommodate MeshConfig changes. #3280

MeshCatalog Cleanup

• Move GetServicesForProxy out of MeshCatalog and into Proxy Registry / Proxy{} Move GetServicesForProxy out of MeshCatalog and into Proxy Registry / Proxy{} #3272
• Event-driven Pre-computation of Services per Envoy/Pod Event-driven Pre-computation of Services per Envoy/Pod #3273

Configurability

• Make certificate key bit size configurable Make certificate key bit size configurable #1933

Debug Tooling

• Update the status of the MeshConfig CRD w/ relevant info Update the status of the MeshConfig CRD w/ relevant info #3217
• Update SMI policy's status field w/ errors Update SMI policy's status field w/ errors #3218
• cli: Create CLI tool to run troubleshooting tooling cli: Create CLI tool to run troubleshooting tooling #2879
• tool to check envoy config tests: integrate tool to check envoy config #2728
• tool to check for DNS resolution from meshed Pod debug: tool to check for DNS resolution from meshed Pod #2729
• expose osm-controller version expose osm-controller version #1152
• Create an osm command that allows a user to check if an osm control plane is healthy Create an osm command that allows a user to check if an osm control plane is healthy #85
• OSM CLI prompt to upgrade OSM CLI prompt to upgrade #2294
• osm command for verifying mTLS connection between two services osm command for verifying mTLS connection between two services #1388

Code Quality

• identity: Make UnmarshalK8sServiceAccount a method on SDSCert and deprecate as a standalone function identity: Make UnmarshalK8sServiceAccount a method on SDSCert and deprecate as a standalone function #3220
• Simplify kubernetes PubSub API Simplify OSM PubSub API for kubernetes events #3174
• dispatcher: isDeltaUpdate needs more robust implementation dispatcher: isDeltaUpdate needs more robust implementation #3162

Testing

• Configure e2es to run on OpenShift Configure e2es to run on OpenShift #3097
• Create soak test environment for project Create soak test environment for project #2392
• Improve test coverage (goal: 80%) (root) Improve test coverage (goal: 80%) #1489
• Make bookstore app ports configurable in automated demo Make bookstore app ports configurable in automated demo #2755

Metrics

• Consolidate metric/scrapping configuration Consolidate metric/scrapping configuration #3065

xDS

• xds: Envoys should be grouped by ServiceAccount (config distributed should be the same) xds: Envoys should be grouped by ServiceAccount (config distributed should be the same) #3046
• Use go-control-plane's NewServer() and SnapshotCache system to improve ADS Use go-control-plane's NewServer() and SnapshotCache system to improve ADS #2683

Documentation

• doc: Per Service Filter Chains design doc: Per Service Filter Chains #2858

Features

• Required resource setting for injected containers Required resource setting for injected containers #2472
• Integrate OSM with OPA envoy plugin Integrate OSM with OPA envoy plugin #1874
• (root) Upgrade story (v2) (root) Upgrade story (v2) #3019
• envoy: Implement locality-based prioritized (affinitized) endpoint traffic routing envoy: Implement locality-based prioritized (affinitized) endpoint traffic routing #3043
• envoy: Implement active health checking envoy: Implement active health checking #3042
• Certificate rotor rotates the same certificate multiple times in the same rotation cycle if the service cert validity duration is <= 1 minute Certificate rotor rotates the same certificate multiple times in the same rotation cycle if the service cert validity duration is <= 1 minute #2832
• Allow splitting traffic to same FQDN using multiple traffic split policies matching different routes Allow splitting traffic to same FQDN using multiple traffic split policies matching different routes #2759
• Don't expose envoy log level to end users Don't expose envoy log level to end users #2754
• (root) Use a CRD instead of ConfigMap for OSM configuration (root) Use a CRD instead of ConfigMap for OSM configuration #2738
• handle traffic split in permissive mode Implement traffic split in permissive mode #2527
• SMI conversion webhook to upgrade to newer SMI API versions SMI conversion webhook to upgrade to newer SMI API versions #2737
• Implement custom metrics for all TCP traffic Implement custom metrics for all TCP traffic #2506
• Aggregated metrics for consumption by Azure monitor and Traffic metrics team Aggregated metrics for consumption by Azure monitor and Traffic metrics team #2498
• Record expected proxy without relying on in-memory state shared between controller and injector Record expected proxy without relying on in-memory state shared between controller and injector #2481
• Root Certificate locality (country, locality, organization) should be configurable (vs const) Root Certificate locality (country, locality, organization) should be configurable (vs const) #2470
• Add SMI Traffic Split (v1alpha4) support in the routes v2 feature Add SMI Traffic Split (v1alpha4) support in the routes v2 feature  #2368
• Provide Windows container support Provide Windows container support #2082
• Observability: Integration with AZure monitor Observability: Integration with AZure monitor #1511
• Create a demo for an A/B testing example Create a demo for an A/B testing example #737
• (root) Ingress story for OSM (root) Ingress story for OSM #285
• investigate smi-controller-sdk for osm project investigate smi-controller-sdk for osm project #3063

[shashankram]

My proposal:

GA readiness:
High availability #3390
Envoy health check: #3042
Better logging: #2924
Envoy log: #2754
Ingress security hardening: #2365

Upstream usability:
CLI/doc compatibility: #3371
Grafana licensing implications: #3208
Document k8s version skew: https://github.com/openservicemesh/osm/issues/2852
Security disclosure process: #2402
CLI upgrade prompt: #2294

Troubleshooting:
CLI tools: #2879
Error visibility: #2866
Consistency check tool: #2099
Debug sidecar: #682
Control plane health: #85

Upgrade:
https://github.com/openservicemesh/osm/issues?q=is%3Aissue+is%3Aopen+label%3Aarea%2Fupgrade (except #512 )

Identity:
#3187
#3188
#3186
#3182

Observability:
Egress metrics: #3164
Scraping config: #3065
TCP metrics: #2506
Annotate Prometheus control plane metrics: #2408
Distributed tracing: #1921
Ingress metrics: #1697

SMI:
Traffic split v1alpha4 #2368
Flagger: #1700

All bugs:
https://github.com/openservicemesh/osm/issues?q=is%3Aissue+is%3Aopen+label%3Abug

[snehachhabria]

We should add some work items on multicluster features, issues for these are : https://github.com/openservicemesh/osm/issues?q=is%3Aopen+is%3Aissue+label%3Aarea%2Fmulticluster

[michelleN]

From an SMI + OSM perspective:

• Implement SMI Metrics API Server Implement SMI metrics API server #1540
• Build OSM/Flagger demo (root) Integrate OSM with Flagger #1700
• TrafficSplit v1alpha4 Add SMI Traffic Split (v1alpha4) support in the routes v2 feature  #2368
• Handling existing policies after SMI crd upgrade How does OSM upgrade handle SMI version upgrades on a cluster with existing policies? #893
• Continue working on smi-controller-sdk to consolidate SMI boilerplate for shared use and integrate into OSM investigate smi-controller-sdk for osm project #3063