ovn-org / ovn-kubernetes / 6745210868

53%

Build Type

push

github

Committed by jcaamano

Commit Message

Update egress firewall to use namespaced port group instead of
cluster port group + address set match to reduce the number of OVS
flows.
Previously, all EF ACLs were applied to the clusterPortGroup, and
matched source on address set. In that case, all node will have the
same set of OVS flows, matching sources that are not scheduled on
that node at all. When using port group as a source match, only
flow for local ports will be present on every node.
The port group is created, updated and deleted by namespace handler
similar to the namespace address set.

Signed-off-by: Nadia Pinaeva <npinaeva@redhat.com>

Run Details

122 of 145 new or added lines in 2 files covered. (84.14%)

246 existing lines in 8 files now uncovered.

25537 of 50610 relevant lines covered (50.46%)

87.76 hits per line