Skip to content

[Windows] Support NodePortLocal on Antrea Windows Agent#1

Open
XinShuYang wants to merge 139 commits intofeature/externalnodefrom
npl
Open

[Windows] Support NodePortLocal on Antrea Windows Agent#1
XinShuYang wants to merge 139 commits intofeature/externalnodefrom
npl

Conversation

@XinShuYang
Copy link
Owner

  • Support NodePortLocal rules on by using NetNatStaticMapping on windows
  • Support NPL agent on Windows platform
  • Require the same Antrea NPL configuration as Linux

Signed-off-by: Shuyang Xin gavinx@vmware.com

tnqn and others added 11 commits March 30, 2022 10:37
Signed-off-by: Quan Tian <qtian@vmware.com>
Move Antrea Windows log dir from `C:\k\antrea\logs\` to
`C:\var\log\antrea\`

Signed-off-by: wgrayson <wgrayson@vmware.com>
Fixes antrea-io#3131

Signed-off-by: Hongliang Liu <lhongliang@vmware.com>
Egress feature is enabled by default now.

Signed-off-by: Jianjun Shen <shenj@vmware.com>
And fix an invalid link.

Signed-off-by: Quan Tian <qtian@vmware.com>
Keep non dangling images which will be used in following
steps to build new images, otherwise, antrea image will build
ovs from scratch which is time-consuming.

Signed-off-by: Lan Luo <luola@vmware.com>
Add feature label to branch filter.

Fixes antrea-io#3551

Signed-off-by: Shuyang Xin <gavinx@vmware.com>
1. add ClusterNetworkPolicy CRD which is required by copy-span ACNP
2. Fix test resource creation conflicts

Signed-off-by: Lan Luo <luola@vmware.com>
* sigs.k8s.io/* modules
* github.com/containernetworking/* modules

These are things we want to update manually.

Signed-off-by: Antonin Bas <abas@vmware.com>
…antrea-io#3527)

A feature might be enabled by default on Linux, but is not supported on
Windows, so set the default feature gates of such features to false on
Windows.

Signed-off-by: Jianjun Shen <shenj@vmware.com>
@XinShuYang XinShuYang force-pushed the npl branch 4 times, most recently from 720288a to 294dfee Compare April 1, 2022 07:47
tnqn and others added 5 commits April 2, 2022 00:52
Signed-off-by: Antonin Bas <abas@vmware.com>
InternalTrafficPolicy is introduced in Kubernetes 1.21. Service Internal
Traffic Policy enables internal traffic restrictions to only route
internal traffic to Endpoints within the Node the traffic originated
from. The "internal" traffic here refers to traffic originated from Pods
in the current cluster. This can help to reduce costs and improve
performance.

Signed-off-by: Hongliang Liu <lhongliang@vmware.com>
Functions listed in the following are used to install initial flows. However,
in framework Flexible Pipeline, every feature has a method `initFlows()`
to install initial flows. This PR moves the installation of initial flows in
the following functions to the method `initFlows()` of corresponding
features.

 - InstallGatewayFlows() error -> feature PodConnectivity
 - InstallClusterServiceCIDRFlows(serviceNets []*net.IPNet) error -> feature Service
 - InstallDefaultServiceFlows(nodePortAddressesIPv4, nodePortAddressesIPv6 []net.IP) error -> feature Service
 - InstallDefaultTunnelFlows() error -> feature PodConnectivity
 - InstallBridgeUplinkFlows() error -> feature PodConnectivity
 - InstallExternalFlows(exceptCIDRs []net.IPNet) error  -> feature Egress

 Signed-off-by: Hongliang Liu <lhongliang@vmware.com>
Validate IP version and prefix length fields.

Signed-off-by: Jianjun Shen <shenj@vmware.com>
@XinShuYang XinShuYang force-pushed the npl branch 3 times, most recently from 66ce016 to edeb9bd Compare April 6, 2022 02:26
luolanzone and others added 4 commits April 7, 2022 10:45
Signed-off-by: Lan Luo <luola@vmware.com>
Fixes antrea-io#3559

Skip the reject response generation when neither src nor dst are on
current Node.

Re-write the MAC address for `RejectPodLocal` reject type no matter
AntreaIPAM is on or not. And send the packetOut directly to the
dstPod instead of L3Forwarding table.

Signed-off-by: wgrayson <wgrayson@vmware.com>
…io#3585)

String search is unreliable, for example some YAML strings may be quoted
and others not. Instead we parse the config before accessing fields,
like we do for config mutation functions.

Signed-off-by: Antonin Bas <abas@vmware.com>
Extend Antrea IPAM and Antrea CNI plugin to support IPAM for Pod
secondary networks. A CNI call that specifies a non-Antrea CNI type and
Antrea IPAM type is identified as an IPAM request for a secondary
network. The IPAM configuration of the CNI call should specify the
Antrea IPPool(s) to allocate IPs for the secondary network.
Additionally, Routes and DNS parameters are supported in the IPAM
configuration.

This implementation is for secondary network managed by Multus, not
Antrea native secondary network support. Only a single IPv4 IPPool is
supported as of now.

An example Multus NetworkAttachmentDefinition with Antrea IPAM:

kind: NetworkAttachmentDefinition
metadata:
  name: macvlan-network1
spec:
  config: '{
      "cniVersion": "0.3.0",
      "type": "macvlan",
      "master": "enp0s9",
      "mode": "bridge",
      "ipam": {
        "type": "antrea-ipam",
        "ippool": "macvlan-subnet1"
        "routes": [
          { "dst": "192.168.0.0/16", "gw": "10.10.5.1" },
          { "dst": "3ffe:ffff:0:01ff::1/64" }
        ],
        "dns": {
          "nameservers" : ["8.8.8.8"],
          "domain": "example.com",
          "search": [ "example.com" ]
        }
      }
    }'

Signed-off-by: Jianjun Shen <shenj@vmware.com>
dependabot bot added 2 commits April 11, 2022 11:00
Bumps [actions/stale](https://github.com/actions/stale) from 4 to 5.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@v4...v5)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 1 to 3.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md)
- [Commits](codecov/codecov-action@v1...v3)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@XinShuYang
Copy link
Owner Author

/test-e2e

26 similar comments
@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@XinShuYang
Copy link
Owner Author

/test-e2e

@antrea-bot
Copy link

/test-eee

2 similar comments
@XinShuYang
Copy link
Owner Author

/test-eee

@XinShuYang
Copy link
Owner Author

/test-eee

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.