Skip to content

ACL Indexes Merge Downstream: 31st May 2023 #1684

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
tssurya wants to merge 18 commits into from
Closed

ACL Indexes Merge Downstream: 31st May 2023 #1684

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
18 commits
Select commit Hold shift + click to select a range
11b7e2f
update all fields on CreateOrUpdateACLsOps, especially for nil values,
npinaeva Mar 13, 2023
18dcd72
rename aclType to aclPipelineType, add aclDirection type to separate
npinaeva Mar 29, 2023
f89913e
Start using new ExternalIDs for ACLs. Multicast.
npinaeva Mar 24, 2023
cb4c4b3
Allow from node ACL:
npinaeva Mar 29, 2023
2aab19e
Update gress policy ACLs to use new dbIndex.
npinaeva Mar 29, 2023
28396ad
Update DefaultDeny ACLs to have new dbIDs.
npinaeva Mar 29, 2023
d75cee1
Update EgressFirewall ACLs to have new dbIndex.
npinaeva Mar 29, 2023
447b11b
Finalize new ACL dbIndex usage:
npinaeva Jan 3, 2023
448cfc1
Update e2e tests for acl logging with the new acl names.
npinaeva Mar 27, 2023
0254d0f
Merge pull request #3334 from npinaeva/acls-new-indexes
trozet Apr 5, 2023
9d216fc
Use PrimaryID as a client index for ACL.
npinaeva Apr 6, 2023
b7afb8a
optimize deleteStaleNetpolPeerAddrSets to iterate over all acls only …
npinaeva Apr 3, 2023
ffdcf1b
delete getNewLocalPolicyPorts log
npinaeva Apr 3, 2023
2a89def
services: Don't try to list/cleanup templates when OVN doesn't suppor…
dceara Apr 6, 2023
0b3196b
Merge pull request #3523 from dceara/fix-no-template-support
trozet Apr 7, 2023
87b62db
Merge pull request #3522 from npinaeva/netpol-perf-fixes
trozet Apr 7, 2023
9e21b3a
Merge pull request #3521 from npinaeva/acl-use-client-index
trozet Apr 7, 2023
2f2bc32
Merge remote-tracking branch 'ovnorg-origin/acl-indexes-merge' into a…
tssurya May 30, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -140,6 +140,8 @@ that can be brought up locally and within a few minutes.

[Debugging OVN](./docs/debugging.md)

[Exposed metrics](./docs/metrics.md)

The golang based [ovn kubernetes go-controller](./go-controller/README.md) is a reliable way to
deploy the OVN SDN using kubernetes clients and watchers based on golang. Contains `ovnkube` and
`ovn-k8s-cni-overlay` build and usage instructions.
Expand Down Expand Up @@ -207,6 +209,8 @@ cluster network.
[ovnkube-trace](./docs/ovnkube-trace.md) a tool to trace packet simulations between points in an
ovn-kubernetes driven cluster.

[ACLs used by ovn-k and their priorities](./docs/acls.md)

# OVN Kubernetes Basics
A good resource to get started with understanding `ovn-kubernetes` is the following recording and slides, which run through the basic architecture and functionality of the system.
[slides](https://docs.google.com/presentation/d/1ZtwP3t6uNAU0g4S7IbqSxPg2bmQW-pPGyMW2ZNj9Nrg/edit?usp=sharing)
Expand Down
Loading