Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Rebase master with 4.6 content #255

Merged
merged 47 commits into from Jun 3, 2020

Conversation

dulek
Copy link
Contributor

@dulek dulek commented Jun 3, 2020

Get in all the stuff that was previously blocked by feature freeze.

MaysaMacedo and others added 30 commits April 9, 2020 10:24
The repo networking-ovn moved to ovn-octavia-provider. We should
move the CI to install OVN from the Neutron repo.

Depends-On: https://review.opendev.org/#/c/717860/
Change-Id: I82678cf52bf5d3f7594c33f5ca032983cdbdc326
The networking-ovn repository moved to ovn-octavia-provider.
This commit updates the local.conf to use the new repository.

Depends-On: https://review.opendev.org/#/c/717860/
Change-Id: I8c9394bc5f3b6bca84149cfcd7587f4008606c46
This patch adds check for vif type before call
configure_l3 function. It should not be called
for VIFVHostUser VIFs.

Change-Id: I0106fd92970221d6a6b72a13758e8823d4007b8f
Signed-off-by: Danil Golov <d.golov@samsung.com>
Now that we no longer support py27, we can use the standard library
unittest.mock module instead of the third party mock lib.

Change-Id: I26b9878515ea156a6b4bde14a64848621593d868
Signed-off-by: Sean McGinnis <sean.mcginnis@gmail.com>
And fix documents typo about "generate_k8s_resource_definitions.sh"

Closes-bug: 1873544
Change-Id: I1e227b6d9efce4c41ee2431a817b00d97d33af91
Change-Id: I094e4fcfc32cbcefdb96aa498f6c2c4ee3624019
Add file to the reno documentation build to show release notes for
stable/ussuri.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/ussuri.

Change-Id: If662119ee01ef4f3ff11473919411eed75f0a778
Sem-Ver: feature
This is an automatically generated patch to ensure unit testing
is in place for all the of the tested runtimes for victoria.

See also the PTI in governance [1].

[1]: https://governance.openstack.org/tc/reference/project-testing-interface.html

Change-Id: I658454adc9ff1d5350bd8c99b54f06cd545ed28f
OpenStackSDK have renamed some fields for Neutron API to be able to
create port object with attributes named after those fields. In our
workaround, we didn't spot that, so that all of the neutron API port
fields which prefixes started from 'binding_' cause an exception on the
neutron API call side.

In this patch we fix this by changing those fields to be acceptable
directly by Neutron API.

Note, that _create_ports is a workaround, which will be removed when
kuryr-kubernetes will bump openstakcsdk version to minimum 0.42 in
lower constraints.

Closes-bug: 1874276
Change-Id: Id36a00b94f9df837c49ced7155f8117fe9625fc2
Somehow an update to centos repos and the fact that docker.io centos
containers weren't updated for a while broke us. To fix this we need to
make sure RPMs in the container are upgraded, otherwise `yum history
undo last` fails miserably with missing packages errors.

Also this commit makes sure installation dies when we're unable to build
containers.

Change-Id: I29e19e13aa22047bfa07817a7794fc18612bbc32
This patch ensure the proper listener id is found and its associated
security groups are updated.

Change-Id: I72120c33debddfe6ba29c8c0152a0cef4e96a6eb
Closes-Bug: 1875428
Sometimes we create a lot of security group rules, which might exceed
the quotas. In this patch we propose to distinguish conflict exceptions
for quota exceeding from rule already exists.

Change-Id: Icea686ec9d1fcb701f1853c40d6cfd4ca20fd0ac
When a pod event is handled it's possible that a Network Policy and Service
are affected by that pod and the LB sg of selected services needs to be
updated. However, the endpoints for the matched service may not be yet
present or were deleted, resulting in a NotFound exception.
This commit handled this exception by skipping the LB sg update.

Change-Id: I21a4d6cb515633d47b534f180517687d07b8f83f
Closes-bug: 1876666
Seems like new OVN is not compatible with networking-ovn, so we need to
pin version. I believe this should be done in OVN plugin itself but
whatever, I just want to have the gate green.

I already did that in stable/ussuri as part of
I29e19e13aa22047bfa07817a7794fc18612bbc32, but this should probably be
cherry-picked to stable/train and stable/stein too.

Change-Id: Ie32570dfd0bf2154fdac5886321d8432e21c022c
Currently we do have quotas for SG rules set to 100. While that's enough
for IPv4 networking, it insufficient for the IPv6. There are tests,
where a lot of security group rules are created, which number on the
IPv6 networks increases even more. We propose to raise that number to
300. 300 brave SG rules.

Change-Id: I3efd668d8a58706443426f14d77c119533b5dffb
In network policy driver we are using security groups for the OpenStack
side to create appropriate port ranges to be open for certain hosts (or
all hosts). In this patch we add a mechanism for selecting right IP
version to the rule, or create rules for both (IPv4 and IPv6) network
types.

Implements: blueprint kuryr-ipv6-support
Change-Id: Ie7544aeebb1d18038ebc19c8f815b69213b55a88
Seems like flake8 3.8.1 got released that introduced new rules we
violate, rendering our pep8 job broken. This commit fixes them.

Change-Id: I7e4f2767856be8666c8f37f3b481f8bf43412ce8
zhufl and others added 9 commits May 22, 2020 14:55
This is to add missing white space between words in log message.

Change-Id: I3e77904154b9745df46c05a8ea4863ad80c2034b
Change-Id: I7e315eba661798655322c785bb578576da8e496a
Add gate to check k8s-services backed by OVN provider

Depends-On: I414a3c6d2e97d30ff12eda4ecf71ec032998df7d
Depends-On: I89e969ae52378a7c62ac552e1a69b7e2a45bd23a
Depends-On: If10016325517e4a1fc5f7cfac7f7bd58deb09b54
Depends-On: Ife099f1d05c0cae954119f0ef4616c95076f83e7
Depends-On: Ibb958ea5acaaf07af8ebed5d9552036db9469346
Depends-On: I40bf39c4c1d0b43f5d83e6aed81786390753ce99
Change-Id: I31ebb17e84055d900338a18f83bf63818dc3ce0d
Implements: blueprint octavia-ovn-provider
When deleting services and the respective load balancer
with using ovn-octavia provider, the lb sg is not deleted.
This commit fixes the issue by removing the LB sg creation
when the octavia provider is ovn-octavia, as that sg is not
really enforced.

Closes-bug: 1880207
Change-Id: I2c77b1d0ac682008ff6c31781d6075c208c689d0
This patch ensures if on_finalize event for a CR is processed before
its status got populated, it is still possible to remove its finalizer
and unblock the namespace deletion.

Change-Id: I338ad6967f96807431754e91d2c1f9031723ec8e
Closes-Bug: 1881318
@openshift-ci-robot openshift-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jun 3, 2020
@luis5tb
Copy link
Contributor

luis5tb commented Jun 3, 2020

/lgtm

@openshift-ci-robot openshift-ci-robot added the lgtm Indicates that a PR is ready to be merged. label Jun 3, 2020
@dulek
Copy link
Contributor Author

dulek commented Jun 3, 2020

/hold

@openshift-ci-robot openshift-ci-robot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Jun 3, 2020
Change-Id: If75c8f51f88a30f13766a08295dad7fcafef5cf3
@openshift-ci-robot openshift-ci-robot removed the lgtm Indicates that a PR is ready to be merged. label Jun 3, 2020
@dulek
Copy link
Contributor Author

dulek commented Jun 3, 2020

/hold cancel

@openshift-ci-robot openshift-ci-robot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Jun 3, 2020
@luis5tb
Copy link
Contributor

luis5tb commented Jun 3, 2020

/lgtm

@openshift-ci-robot openshift-ci-robot added the lgtm Indicates that a PR is ready to be merged. label Jun 3, 2020
@openshift-ci-robot
Copy link

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dulek, luis5tb

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-merge-robot openshift-merge-robot merged commit 6785e4b into openshift:master Jun 3, 2020
MaysaMacedo pushed a commit to MaysaMacedo/kuryr-kubernetes-1 that referenced this pull request Jul 1, 2021
MaysaMacedo pushed a commit to MaysaMacedo/kuryr-kubernetes-1 that referenced this pull request Jul 1, 2021
This change contains the following fix:
 + updating README.md with this new configuration.
 + fix macvlan config "cniVersion" to 0.3.1 and its namespace
MaysaMacedo pushed a commit to MaysaMacedo/kuryr-kubernetes-1 that referenced this pull request Jul 1, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet