Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[release-4.15] OCPBUGS-43605: backport fix for network policy during live migration #642

Open
wants to merge 2 commits into
base: release-4.15
Choose a base branch
from

Commits on Nov 14, 2024

  1. Implement namespaceSelectors on ingress with all pods IPs

    During SDN live migration, the VNID from ovn-k nodes cannot be
    used distinguish namespaces. So generate per-pod-IP match rules
    instead.
    
    For host network namespace, we need to rules with the OVN mp0 IPs
    for the host to pod traffic from the ovn-k nodes.
    
    Signed-off-by: Peng Liu <[email protected]>
    pliurh committed Nov 14, 2024
    Configuration menu
    Copy the full SHA
    f51ab31 View commit details
    Browse the repository at this point in the history
  2. Use copy() to duplicate a net.IP

    Signed-off-by: Peng Liu <[email protected]>
    pliurh committed Nov 14, 2024
    Configuration menu
    Copy the full SHA
    4d01e40 View commit details
    Browse the repository at this point in the history