Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SDN-5636: Udn hostnet isolation #29470

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

npinaeva
Copy link
Member

@npinaeva npinaeva commented Jan 23, 2025

Partial copy of ovn-kubernetes/ovn-kubernetes@5b62be5#diff-2be1e01ba9cf5c059a4f4f0cd2b974861043381664e7102e3783f48842891d43.
Non-kubelet host process checks are removed, as there is no way to directly access OCP nodes (without privileged host-network pods) anyway, and host-network checks exist separately.
Second commit is a copy of ovn-kubernetes/ovn-kubernetes@a822445

@openshift-ci openshift-ci bot requested review from danwinship and knobunc January 23, 2025 12:04
Copy link
Contributor

openshift-ci bot commented Jan 23, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: npinaeva
Once this PR has been reviewed and has the lgtm label, please assign bparees for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@npinaeva npinaeva changed the title Udn hostnet isolation SDN-5636: Udn hostnet isolation Feb 4, 2025
@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Feb 4, 2025
@openshift-ci-robot
Copy link

openshift-ci-robot commented Feb 4, 2025

@npinaeva: This pull request references SDN-5636 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.19.0" version, but no target version was set.

In response to this:

Partial copy of ovn-kubernetes/ovn-kubernetes@5b62be5#diff-2be1e01ba9cf5c059a4f4f0cd2b974861043381664e7102e3783f48842891d43.
Non-kubelet host process checks are removed, as there is no way to directly access OCP nodes (without privileged host-network pods) anyway, and host-network checks exist separately.
Second commit is a copy of ovn-kubernetes/ovn-kubernetes@a822445

This will only work after ovn-kubernetes/ovn-kubernetes#4999 reached d/s together with host isolation enablement

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot
Copy link

openshift-ci-robot commented Feb 7, 2025

@npinaeva: This pull request references SDN-5636 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "4.19.0" version, but no target version was set.

In response to this:

Partial copy of ovn-kubernetes/ovn-kubernetes@5b62be5#diff-2be1e01ba9cf5c059a4f4f0cd2b974861043381664e7102e3783f48842891d43.
Non-kubelet host process checks are removed, as there is no way to directly access OCP nodes (without privileged host-network pods) anyway, and host-network checks exist separately.
Second commit is a copy of ovn-kubernetes/ovn-kubernetes@a822445

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@npinaeva
Copy link
Member Author

npinaeva commented Feb 7, 2025

/payload-job periodic-ci-openshift-release-master-nightly-4.19-e2e-vsphere-ovn-techpreview
/payload-job periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-ipv6-techpreview
/payload-job periodic-ci-openshift-release-master-nightly-4.19-e2e-azure-ovn-runc-techpreview
/payload-job periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-dualstack-techpreview

Copy link
Contributor

openshift-ci bot commented Feb 7, 2025

@npinaeva: trigger 4 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command

  • periodic-ci-openshift-release-master-nightly-4.19-e2e-vsphere-ovn-techpreview
  • periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-ipv6-techpreview
  • periodic-ci-openshift-release-master-nightly-4.19-e2e-azure-ovn-runc-techpreview
  • periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-dualstack-techpreview

See details on https://pr-payload-tests.ci.openshift.org/runs/ci/2eac58a0-e53c-11ef-851a-1ff1f101943b-0

@npinaeva
Copy link
Member Author

/payload-job periodic-ci-openshift-release-master-nightly-4.19-e2e-vsphere-ovn-techpreview
/payload-job periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-ipv6-techpreview
/payload-job periodic-ci-openshift-release-master-nightly-4.19-e2e-azure-ovn-runc-techpreview
/payload-job periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-dualstack-techpreview

Copy link
Contributor

openshift-ci bot commented Feb 10, 2025

@npinaeva: trigger 4 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command

  • periodic-ci-openshift-release-master-nightly-4.19-e2e-vsphere-ovn-techpreview
  • periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-ipv6-techpreview
  • periodic-ci-openshift-release-master-nightly-4.19-e2e-azure-ovn-runc-techpreview
  • periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-dualstack-techpreview

See details on https://pr-payload-tests.ci.openshift.org/runs/ci/78fd8a40-e795-11ef-9338-8092573db7d9-0

@npinaeva npinaeva force-pushed the udn-hostnet-isolation branch from 9c31bcf to 28590e8 Compare February 12, 2025 09:12
Copy link

openshift-trt bot commented Feb 12, 2025

Job Failure Risk Analysis for sha: 28590e8

Job Name Failure Risk
pull-ci-openshift-origin-master-okd-scos-e2e-aws-ovn High
[sig-arch] Only known images used by tests
This test has passed 100.00% of 25 runs on jobs [periodic-ci-openshift-release-master-ci-4.19-e2e-aws-ovn] in the last 14 days.

Copy link
Contributor

openshift-ci bot commented Feb 13, 2025

@npinaeva: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-vsphere-ovn ea24d99 link true /test e2e-vsphere-ovn
ci/prow/e2e-aws-ovn-single-node-serial ea24d99 link false /test e2e-aws-ovn-single-node-serial
ci/prow/e2e-vsphere-ovn-upi ea24d99 link true /test e2e-vsphere-ovn-upi
ci/prow/e2e-aws-ovn-single-node ea24d99 link false /test e2e-aws-ovn-single-node
ci/prow/okd-scos-e2e-aws-ovn ea24d99 link false /test okd-scos-e2e-aws-ovn
ci/prow/e2e-gcp-ovn ea24d99 link true /test e2e-gcp-ovn
ci/prow/e2e-metal-ipi-ovn-ipv6 ea24d99 link true /test e2e-metal-ipi-ovn-ipv6
ci/prow/e2e-hypershift-conformance ea24d99 link false /test e2e-hypershift-conformance
ci/prow/e2e-aws-ovn-single-node-upgrade ea24d99 link false /test e2e-aws-ovn-single-node-upgrade
ci/prow/e2e-openstack-ovn ea24d99 link false /test e2e-openstack-ovn

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Copy link

openshift-trt bot commented Feb 13, 2025

Job Failure Risk Analysis for sha: ea24d99

Job Name Failure Risk
pull-ci-openshift-origin-master-e2e-aws-ovn-single-node-upgrade High
pull-ci-openshift-origin-master-e2e-vsphere-ovn-upi Medium
[sig-sippy] infrastructure should work
This test has passed 84.85% of 33 runs on release 4.19 [Architecture:amd64 FeatureSet:default Installer:upi Network:ovn NetworkStack:ipv4 Platform:vsphere SecurityMode:default Topology:ha Upgrade:none] in the last week.
pull-ci-openshift-origin-master-e2e-openstack-ovn Medium
[bz-Routing] clusteroperator/ingress should not change condition/Available
This test has passed 96.82% of 4911 runs on release 4.19 [Overall] in the last week.
pull-ci-openshift-origin-master-e2e-hypershift-conformance Medium
[bz-Management Console] clusteroperator/console should not change condition/Available
This test has passed 96.97% of 165 runs on release 4.19 [Architecture:amd64 FeatureSet:default Installer:hypershift Network:ovn NetworkStack:ipv4 Platform:aws SecurityMode:default Topology:external Upgrade:none] in the last week.
---
[sig-sippy] infrastructure should work
This test has passed 80.76% of 291 runs on release 4.19 [Architecture:amd64 FeatureSet:default Installer:hypershift Network:ovn NetworkStack:ipv4 Platform:aws SecurityMode:default Topology:external Upgrade:none] in the last week.
---
[bz-Routing] clusteroperator/ingress should not change condition/Available
This test has passed 96.67% of 4984 runs on release 4.19 [Overall] in the last week.

@npinaeva npinaeva force-pushed the udn-hostnet-isolation branch from ea24d99 to 2b124e0 Compare February 13, 2025 14:05
@npinaeva
Copy link
Member Author

/payload-job periodic-ci-openshift-release-master-nightly-4.19-e2e-vsphere-ovn-techpreview
/payload-job periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-ipv6-techpreview
/payload-job periodic-ci-openshift-release-master-nightly-4.19-e2e-azure-ovn-runc-techpreview
/payload-job periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-dualstack-techpreview

Copy link
Contributor

openshift-ci bot commented Feb 13, 2025

@npinaeva: trigger 4 job(s) for the /payload-(with-prs|job|aggregate|job-with-prs|aggregate-with-prs) command

  • periodic-ci-openshift-release-master-nightly-4.19-e2e-vsphere-ovn-techpreview
  • periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-ipv6-techpreview
  • periodic-ci-openshift-release-master-nightly-4.19-e2e-azure-ovn-runc-techpreview
  • periodic-ci-openshift-release-master-nightly-4.19-e2e-metal-ipi-ovn-dualstack-techpreview

See details on https://pr-payload-tests.ci.openshift.org/runs/ci/af1c7250-ea13-11ef-9552-5f09545f6589-0

Copy link

openshift-trt bot commented Feb 13, 2025

Job Failure Risk Analysis for sha: 2b124e0

Job Name Failure Risk
pull-ci-openshift-origin-master-okd-scos-e2e-aws-ovn High
[sig-network][Feature:Router][apigroup:image.openshift.io] The HAProxy router should serve a route that points to two services and respect weights [Skipped:Disconnected] [Suite:openshift/conformance/parallel]
This test has passed 100.00% of 22 runs on jobs [periodic-ci-openshift-release-master-ci-4.19-e2e-aws-ovn] in the last 14 days.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
jira/valid-reference Indicates that this PR references a valid Jira ticket of any type.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants