Skip to content

[release-4.19] OCPBUGS-77150: Minimize ACLs by combining ipBlocks into single ACL#2996

Closed
pperiyasamy wants to merge 1 commit intoopenshift:release-4.19from
pperiyasamy:np_reduce_acl_ipblock_4.19
Closed

[release-4.19] OCPBUGS-77150: Minimize ACLs by combining ipBlocks into single ACL#2996
pperiyasamy wants to merge 1 commit intoopenshift:release-4.19from
pperiyasamy:np_reduce_acl_ipblock_4.19

Conversation

@pperiyasamy
Copy link
Copy Markdown
Member

@pperiyasamy pperiyasamy commented Feb 23, 2026

Manual cherry-pick of 8336fa0 from 4.20 PR #2981. No conflicts.

@pperiyasamy
Minimize ACLs by combining ipBlocks into single ACL
7d9f56c 
Combine all ipBlocks in a NetworkPolicy rule into single
ACL instead of creating one ACL per ipBlock.
This reduces ACL bloat when policy having multiple ipBlocks
for ingress/egress rules.

Signed-off-by: Periyasamy Palanisamy <pepalani@redhat.com>
(cherry picked from commit fd27015)
(cherry picked from commit 14b7309)
(cherry picked from commit 21ef647)
(cherry picked from commit 8336fa0)
@openshift-ci-robot openshift-ci-robot added jira/severity-critical Referenced Jira bug's severity is critical for the branch this PR is targeting. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. jira/invalid-bug Indicates that a referenced Jira bug is invalid for the branch this PR is targeting. labels Feb 23, 2026
@openshift-ci-robot
Copy link
Copy Markdown
Contributor

openshift-ci-robot commented Feb 23, 2026

@pperiyasamy: This pull request references Jira Issue OCPBUGS-77150, which is invalid:

  • expected dependent Jira Issue OCPBUGS-77148 to be in one of the following states: VERIFIED, RELEASE PENDING, CLOSED (ERRATA), CLOSED (CURRENT RELEASE), CLOSED (DONE), CLOSED (DONE-ERRATA), but it is New instead

Comment /jira refresh to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.

The bug has been updated to refer to the pull request using the external bug tracker.

Details

In response to this:

Manual cherry-pick of 8336fa0 from 4.20 PR #2981. No conflicts.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci openshift-ci Bot requested review from jcaamano and tssurya February 23, 2026 09:16
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Feb 23, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: pperiyasamy
Once this PR has been reviewed and has the lgtm label, please assign abhat for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@pperiyasamy pperiyasamy mentioned this pull request Feb 23, 2026
Closed
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Feb 23, 2026

@pperiyasamy: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-aws-ovn-windows 7d9f56c link true /test e2e-aws-ovn-windows
ci/prow/4.19-upgrade-from-stable-4.18-e2e-aws-ovn-upgrade 7d9f56c link true /test 4.19-upgrade-from-stable-4.18-e2e-aws-ovn-upgrade
ci/prow/e2e-aws-ovn-edge-zones 7d9f56c link true /test e2e-aws-ovn-edge-zones
ci/prow/e2e-metal-ipi-ovn-dualstack-bgp-local-gw 7d9f56c link true /test e2e-metal-ipi-ovn-dualstack-bgp-local-gw
ci/prow/security 7d9f56c link false /test security
ci/prow/e2e-metal-ipi-ovn-dualstack-bgp 7d9f56c link true /test e2e-metal-ipi-ovn-dualstack-bgp

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@pperiyasamy
Copy link
Copy Markdown
Member Author

pperiyasamy commented Feb 24, 2026

/hold

@openshift-ci openshift-ci Bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Feb 24, 2026
@ricky-rav ricky-rav mentioned this pull request Feb 24, 2026
Merged
@openshift-ci-robot openshift-ci-robot mentioned this pull request Apr 17, 2026
Merged
@arkadeepsen
Copy link
Copy Markdown
Member

arkadeepsen commented Apr 17, 2026

/close

in favour of #3116

@openshift-ci openshift-ci Bot closed this Apr 17, 2026
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci Bot commented Apr 17, 2026

@arkadeepsen: Closed this PR.

Details

In response to this:

/close

in favour of #3116

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jcaamano jcaamano Awaiting requested review from jcaamano

@tssurya tssurya Awaiting requested review from tssurya

Assignees

No one assigned

Labels

do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. jira/invalid-bug Indicates that a referenced Jira bug is invalid for the branch this PR is targeting. jira/severity-critical Referenced Jira bug's severity is critical for the branch this PR is targeting. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@pperiyasamy @openshift-ci-robot @arkadeepsen