• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

kubeovn / kube-ovn / 20014850206

08 Dec 2025 02:34AM UTC coverage: 22.244% (+0.02%) from 22.225%
20014850206

push

github

web-flow
fix: handle empty IP and CIDR in GetIPAddrWithMask function (#6002)

fix: log message for skipping IP allocation in NAT gateway

Signed-off-by: zbb88888 <jmdxjsjgcxy@gmail.com>

9 of 29 new or added lines in 3 files covered. (31.03%)

1 existing line in 1 file now uncovered.

11557 of 51956 relevant lines covered (22.24%)

0.26 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

0.0
/pkg/daemon/handler.go
1
package daemon
2

3
import (
4
        "context"
5
        "encoding/json"
6
        "fmt"
7
        "net"
8
        "net/http"
9
        "strconv"
10
        "strings"
11
        "time"
12

13
        "github.com/emicklei/go-restful/v3"
14
        v1 "k8s.io/api/core/v1"
15
        k8serrors "k8s.io/apimachinery/pkg/api/errors"
16
        metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
17
        "k8s.io/apimachinery/pkg/labels"
18
        "k8s.io/client-go/kubernetes"
19
        "k8s.io/klog/v2"
20

21
        kubeovnv1 "github.com/kubeovn/kube-ovn/pkg/apis/kubeovn/v1"
22
        clientset "github.com/kubeovn/kube-ovn/pkg/client/clientset/versioned"
23
        "github.com/kubeovn/kube-ovn/pkg/ovs"
24
        "github.com/kubeovn/kube-ovn/pkg/request"
25
        "github.com/kubeovn/kube-ovn/pkg/util"
26
)
27

28
const (
29
        gatewayCheckModeDisabled = iota
30
        gatewayCheckModePing
31
        gatewayCheckModeArping
32
        gatewayCheckModePingNotConcerned
33
        gatewayCheckModeArpingNotConcerned
34
)
35

36
type cniServerHandler struct {
37
        Config        *Configuration
38
        KubeClient    kubernetes.Interface
39
        KubeOvnClient clientset.Interface
40
        Controller    *Controller
41
}
42

43
func createCniServerHandler(config *Configuration, controller *Controller) *cniServerHandler {
×
44
        csh := &cniServerHandler{KubeClient: config.KubeClient, KubeOvnClient: config.KubeOvnClient, Config: config, Controller: controller}
×
45
        return csh
×
46
}
×
47

48
func (csh cniServerHandler) providerExists(provider string) (*kubeovnv1.Subnet, bool) {
×
49
        if util.IsOvnProvider(provider) {
×
50
                return nil, true
×
51
        }
×
52
        subnets, _ := csh.Controller.subnetsLister.List(labels.Everything())
×
53
        for _, subnet := range subnets {
×
54
                if subnet.Spec.Provider == provider {
×
55
                        return subnet.DeepCopy(), true
×
56
                }
×
57
        }
58
        return nil, false
×
59
}
60

61
func (csh cniServerHandler) handleAdd(req *restful.Request, resp *restful.Response) {
×
62
        podRequest := request.CniRequest{}
×
63
        if err := req.ReadEntity(&podRequest); err != nil {
×
64
                errMsg := fmt.Errorf("parse add request failed %w", err)
×
65
                klog.Error(errMsg)
×
66
                if err := resp.WriteHeaderAndEntity(http.StatusBadRequest, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
67
                        klog.Errorf("failed to write response, %v", err)
×
68
                }
×
69
                return
×
70
        }
71
        klog.V(5).Infof("request body is %v", podRequest)
×
72
        podSubnet, exist := csh.providerExists(podRequest.Provider)
×
73
        if !exist {
×
74
                errMsg := fmt.Errorf("provider %s not bind to any subnet", podRequest.Provider)
×
75
                klog.Error(errMsg)
×
76
                if err := resp.WriteHeaderAndEntity(http.StatusBadRequest, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
77
                        klog.Errorf("failed to write response, %v", err)
×
78
                }
×
79
                return
×
80
        }
81

82
        klog.Infof("add port request: %v", podRequest)
×
83
        if err := csh.validatePodRequest(&podRequest); err != nil {
×
84
                klog.Error(err)
×
85
                if err := resp.WriteHeaderAndEntity(http.StatusBadRequest, request.CniResponse{Err: err.Error()}); err != nil {
×
86
                        klog.Errorf("failed to write response, %v", err)
×
87
                }
×
88
                return
×
89
        }
90

91
        var gatewayCheckMode int
×
92
        var macAddr, ip, ipAddr, cidr, gw, subnet, ingress, egress, providerNetwork, ifName, nicType, podNicName, vmName, latency, limit, loss, jitter, u2oInterconnectionIP, oldPodName string
×
93
        var routes []request.Route
×
NEW
94
        var isDefaultRoute, noIPAM bool
×
95
        var pod *v1.Pod
×
96
        var err error
×
97
        for range 20 {
×
98
                if pod, err = csh.Controller.podsLister.Pods(podRequest.PodNamespace).Get(podRequest.PodName); err != nil {
×
99
                        errMsg := fmt.Errorf("get pod %s/%s failed %w", podRequest.PodNamespace, podRequest.PodName, err)
×
100
                        klog.Error(errMsg)
×
101
                        if err := resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
102
                                klog.Errorf("failed to write response, %v", err)
×
103
                        }
×
104
                        return
×
105
                }
106
                if pod.Annotations[fmt.Sprintf(util.AllocatedAnnotationTemplate, podRequest.Provider)] != "true" {
×
107
                        klog.Infof("wait address for pod %s/%s provider %s", podRequest.PodNamespace, podRequest.PodName, podRequest.Provider)
×
108
                        // wait controller assign an address
×
109
                        cniWaitAddressResult.WithLabelValues(nodeName).Inc()
×
110
                        time.Sleep(1 * time.Second)
×
111
                        continue
×
112
                }
113

114
                if err := util.ValidatePodNetwork(pod.Annotations); err != nil {
×
115
                        klog.Errorf("validate pod %s/%s failed, %v", podRequest.PodNamespace, podRequest.PodName, err)
×
116
                        // wait controller assign an address
×
117
                        cniWaitAddressResult.WithLabelValues(nodeName).Inc()
×
118
                        time.Sleep(1 * time.Second)
×
119
                        continue
×
120
                }
121
                ip = pod.Annotations[fmt.Sprintf(util.IPAddressAnnotationTemplate, podRequest.Provider)]
×
122
                cidr = pod.Annotations[fmt.Sprintf(util.CidrAnnotationTemplate, podRequest.Provider)]
×
123
                gw = pod.Annotations[fmt.Sprintf(util.GatewayAnnotationTemplate, podRequest.Provider)]
×
124
                subnet = pod.Annotations[fmt.Sprintf(util.LogicalSwitchAnnotationTemplate, podRequest.Provider)]
×
125
                ingress = pod.Annotations[fmt.Sprintf(util.IngressRateAnnotationTemplate, podRequest.Provider)]
×
126
                egress = pod.Annotations[fmt.Sprintf(util.EgressRateAnnotationTemplate, podRequest.Provider)]
×
127
                latency = pod.Annotations[fmt.Sprintf(util.NetemQosLatencyAnnotationTemplate, podRequest.Provider)]
×
128
                limit = pod.Annotations[fmt.Sprintf(util.NetemQosLimitAnnotationTemplate, podRequest.Provider)]
×
129
                loss = pod.Annotations[fmt.Sprintf(util.NetemQosLossAnnotationTemplate, podRequest.Provider)]
×
130
                jitter = pod.Annotations[fmt.Sprintf(util.NetemQosJitterAnnotationTemplate, podRequest.Provider)]
×
131
                providerNetwork = pod.Annotations[fmt.Sprintf(util.ProviderNetworkTemplate, podRequest.Provider)]
×
132
                vmName = pod.Annotations[fmt.Sprintf(util.VMAnnotationTemplate, podRequest.Provider)]
×
NEW
133
                ipAddr, noIPAM, err = util.GetIPAddrWithMaskForCNI(ip, cidr)
×
134
                if err != nil {
×
135
                        errMsg := fmt.Errorf("failed to get ip address with mask, %w", err)
×
136
                        klog.Error(errMsg)
×
137
                        if err := resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
138
                                klog.Errorf("failed to write response, %v", err)
×
139
                        }
×
140
                        return
×
141
                }
142
                oldPodName = podRequest.PodName
×
143
                if s := pod.Annotations[fmt.Sprintf(util.RoutesAnnotationTemplate, podRequest.Provider)]; s != "" {
×
144
                        if err = json.Unmarshal([]byte(s), &routes); err != nil {
×
145
                                errMsg := fmt.Errorf("invalid routes for pod %s/%s: %w", pod.Namespace, pod.Name, err)
×
146
                                klog.Error(errMsg)
×
147
                                if err = resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
148
                                        klog.Errorf("failed to write response: %v", err)
×
149
                                }
×
150
                                return
×
151
                        }
152
                }
153
                if ifName = podRequest.IfName; ifName == "" {
×
154
                        ifName = "eth0"
×
155
                }
×
156

157
                // For Support kubevirt hotplug dpdk nic, forbidden set the volume name
158
                if podRequest.VhostUserSocketConsumption == util.ConsumptionKubevirt {
×
159
                        podRequest.VhostUserSocketVolumeName = util.VhostUserSocketVolumeName
×
160
                }
×
161

162
                switch {
×
163
                case podRequest.DeviceID != "":
×
164
                        nicType = util.OffloadType
×
165
                case podRequest.VhostUserSocketVolumeName != "":
×
166
                        nicType = util.DpdkType
×
167
                        if err = createShortSharedDir(pod, podRequest.VhostUserSocketVolumeName, podRequest.VhostUserSocketConsumption, csh.Config.KubeletDir); err != nil {
×
168
                                klog.Error(err.Error())
×
169
                                if err = resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: err.Error()}); err != nil {
×
170
                                        klog.Errorf("failed to write response: %v", err)
×
171
                                }
×
172
                                return
×
173
                        }
174
                default:
×
175
                        nicType = pod.Annotations[fmt.Sprintf(util.PodNicAnnotationTemplate, podRequest.Provider)]
×
176
                }
177

178
                switch pod.Annotations[fmt.Sprintf(util.DefaultRouteAnnotationTemplate, podRequest.Provider)] {
×
179
                case "true":
×
180
                        isDefaultRoute = true
×
181
                case "false":
×
182
                        isDefaultRoute = false
×
183
                default:
×
184
                        isDefaultRoute = ifName == "eth0"
×
185
                }
186

187
                if isDefaultRoute && pod.Annotations[fmt.Sprintf(util.RoutedAnnotationTemplate, podRequest.Provider)] != "true" && util.IsOvnProvider(podRequest.Provider) {
×
188
                        klog.Infof("wait route ready for pod %s/%s provider %s", podRequest.PodNamespace, podRequest.PodName, podRequest.Provider)
×
189
                        cniWaitRouteResult.WithLabelValues(nodeName).Inc()
×
190
                        time.Sleep(1 * time.Second)
×
191
                        continue
×
192
                }
193

194
                if vmName != "" {
×
195
                        podRequest.PodName = vmName
×
196
                }
×
197

198
                break
×
199
        }
200

201
        if pod.Annotations[fmt.Sprintf(util.AllocatedAnnotationTemplate, podRequest.Provider)] != "true" {
×
202
                err := fmt.Errorf("no address allocated to pod %s/%s provider %s, please see kube-ovn-controller logs to find errors", pod.Namespace, pod.Name, podRequest.Provider)
×
203
                klog.Error(err)
×
204
                if err := resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: err.Error()}); err != nil {
×
205
                        klog.Errorf("failed to write response, %v", err)
×
206
                }
×
207
                return
×
208
        }
209

210
        if subnet == "" && podSubnet != nil {
×
211
                subnet = podSubnet.Name
×
212
        }
×
NEW
213
        if !noIPAM {
×
NEW
214
                if err := csh.UpdateIPCR(podRequest, subnet, ip); err != nil {
×
NEW
215
                        if err := resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: err.Error()}); err != nil {
×
NEW
216
                                klog.Errorf("failed to write response, %v", err)
×
NEW
217
                        }
×
NEW
218
                        return
×
219
                }
220
        }
221

222
        if isDefaultRoute && pod.Annotations[fmt.Sprintf(util.RoutedAnnotationTemplate, podRequest.Provider)] != "true" && util.IsOvnProvider(podRequest.Provider) {
×
223
                err := fmt.Errorf("route is not ready for pod %s/%s provider %s, please see kube-ovn-controller logs to find errors", pod.Namespace, pod.Name, podRequest.Provider)
×
224
                klog.Error(err)
×
225
                if err := resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: err.Error()}); err != nil {
×
226
                        klog.Errorf("failed to write response, %v", err)
×
227
                }
×
228
                return
×
229
        }
230

231
        var mtu int
×
232
        routes = append(podRequest.Routes, routes...)
×
233
        if strings.HasSuffix(podRequest.Provider, util.OvnProvider) && subnet != "" {
×
234
                podSubnet, err := csh.Controller.subnetsLister.Get(subnet)
×
235
                if err != nil {
×
236
                        errMsg := fmt.Errorf("failed to get subnet %s: %w", subnet, err)
×
237
                        klog.Error(errMsg)
×
238
                        if err = resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
239
                                klog.Errorf("failed to write response: %v", err)
×
240
                        }
×
241
                        return
×
242
                }
243

244
                if podSubnet.Status.U2OInterconnectionIP == "" && podSubnet.Spec.U2OInterconnection {
×
245
                        errMsg := fmt.Errorf("failed to generate u2o ip on subnet %s", podSubnet.Name)
×
246
                        klog.Error(errMsg)
×
247
                        return
×
248
                }
×
249

250
                if podSubnet.Status.U2OInterconnectionIP != "" && podSubnet.Spec.U2OInterconnection {
×
251
                        u2oInterconnectionIP = podSubnet.Status.U2OInterconnectionIP
×
252
                }
×
253

254
                var vmMigration bool
×
255
                subnetHasVlan := podSubnet.Spec.Vlan != ""
×
256
                // skip ping check gateway for pods during live migration
×
257
                if pod.Annotations[util.MigrationJobAnnotation] == "" {
×
258
                        if subnetHasVlan && !podSubnet.Spec.LogicalGateway {
×
259
                                if podSubnet.Spec.DisableGatewayCheck {
×
260
                                        gatewayCheckMode = gatewayCheckModeArpingNotConcerned
×
261
                                } else {
×
262
                                        gatewayCheckMode = gatewayCheckModeArping
×
263
                                }
×
264
                        } else {
×
265
                                if podSubnet.Spec.DisableGatewayCheck {
×
266
                                        gatewayCheckMode = gatewayCheckModePingNotConcerned
×
267
                                } else {
×
268
                                        gatewayCheckMode = gatewayCheckModePing
×
269
                                }
×
270
                        }
271
                } else {
×
272
                        vmMigration = true
×
273
                }
×
274
                if pod.Annotations[fmt.Sprintf(util.ActivationStrategyTemplate, podRequest.Provider)] != "" {
×
275
                        gatewayCheckMode = gatewayCheckModeDisabled
×
276
                }
×
277

278
                if podSubnet.Spec.Mtu > 0 {
×
279
                        mtu = int(podSubnet.Spec.Mtu)
×
280
                } else {
×
281
                        if providerNetwork != "" && !podSubnet.Spec.LogicalGateway && !podSubnet.Spec.U2OInterconnection {
×
282
                                node, err := csh.Controller.nodesLister.Get(csh.Config.NodeName)
×
283
                                if err != nil {
×
284
                                        errMsg := fmt.Errorf("failed to get node %s: %w", csh.Config.NodeName, err)
×
285
                                        klog.Error(errMsg)
×
286
                                        if err = resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
287
                                                klog.Errorf("failed to write response: %v", err)
×
288
                                        }
×
289
                                        return
×
290
                                }
291
                                mtuStr := node.Labels[fmt.Sprintf(util.ProviderNetworkMtuTemplate, providerNetwork)]
×
292
                                if mtuStr != "" {
×
293
                                        if mtu, err = strconv.Atoi(mtuStr); err != nil || mtu <= 0 {
×
294
                                                errMsg := fmt.Errorf("failed to parse provider network MTU %s: %w", mtuStr, err)
×
295
                                                klog.Error(errMsg)
×
296
                                                if err = resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
297
                                                        klog.Errorf("failed to write response: %v", err)
×
298
                                                }
×
299
                                                return
×
300
                                        }
301
                                }
302
                        } else {
×
303
                                mtu = csh.Config.MTU
×
304
                        }
×
305
                }
306

307
                macAddr = pod.Annotations[fmt.Sprintf(util.MacAddressAnnotationTemplate, podRequest.Provider)]
×
308
                klog.Infof("create container interface %s mac %s, ip %s, cidr %s, gw %s, custom routes %v", ifName, macAddr, ipAddr, cidr, gw, routes)
×
309
                podNicName = ifName
×
310

×
311
                var encapIP string
×
312
                if podSubnet.Spec.NodeNetwork != "" {
×
313
                        encapIP, err = csh.Config.GetEncapIPByNetwork(podSubnet.Spec.NodeNetwork)
×
314
                        if err != nil {
×
315
                                errMsg := fmt.Errorf("failed to get encap IP for node network %s: %w", podSubnet.Spec.NodeNetwork, err)
×
316
                                klog.Error(errMsg)
×
317
                                if err = resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
318
                                        klog.Errorf("failed to write response: %v", err)
×
319
                                }
×
320
                                return
×
321
                        }
322
                }
323

324
                switch nicType {
×
325
                case util.DpdkType:
×
326
                        err = csh.configureDpdkNic(podRequest.PodName, podRequest.PodNamespace, podRequest.Provider, podRequest.NetNs, podRequest.ContainerID, ifName, macAddr, mtu, ipAddr, gw, ingress, egress, getShortSharedDir(pod.UID, podRequest.VhostUserSocketVolumeName), podRequest.VhostUserSocketName, podRequest.VhostUserSocketConsumption)
×
327
                        routes = nil
×
328
                default:
×
329
                        routes, err = csh.configureNic(podRequest.PodName, podRequest.PodNamespace, podRequest.Provider, podRequest.NetNs, podRequest.ContainerID, podRequest.VfDriver, ifName, macAddr, mtu, ipAddr, gw, isDefaultRoute, vmMigration, routes, podRequest.DNS.Nameservers, podRequest.DNS.Search, ingress, egress, podRequest.DeviceID, latency, limit, loss, jitter, gatewayCheckMode, u2oInterconnectionIP, oldPodName, encapIP)
×
330
                }
331
                if err != nil {
×
332
                        errMsg := fmt.Errorf("configure nic %s for pod %s/%s failed: %w", ifName, podRequest.PodName, podRequest.PodNamespace, err)
×
333
                        klog.Error(errMsg)
×
334
                        if err := resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
335
                                klog.Errorf("failed to write response, %v", err)
×
336
                        }
×
337
                        return
×
338
                }
339

340
                ifaceID := ovs.PodNameToPortName(podRequest.PodName, podRequest.PodNamespace, podRequest.Provider)
×
341
                if err = ovs.ConfigInterfaceMirror(csh.Config.EnableMirror, pod.Annotations[fmt.Sprintf(util.MirrorControlAnnotationTemplate, podRequest.Provider)], ifaceID); err != nil {
×
342
                        klog.Errorf("failed mirror to mirror0, %v", err)
×
343
                        return
×
344
                }
×
345

346
                if err = csh.Controller.addEgressConfig(podSubnet, ip); err != nil {
×
347
                        errMsg := fmt.Errorf("failed to add egress configuration: %w", err)
×
348
                        klog.Error(errMsg)
×
349
                        if err = resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
350
                                klog.Errorf("failed to write response, %v", err)
×
351
                        }
×
352
                        return
×
353
                }
354
        } else if len(routes) != 0 {
×
355
                hasDefaultRoute := make(map[string]bool, 2)
×
356
                for _, r := range routes {
×
357
                        if r.Destination == "" {
×
358
                                hasDefaultRoute[util.CheckProtocol(r.Gateway)] = true
×
359
                                continue
×
360
                        }
361
                        if _, cidr, err := net.ParseCIDR(r.Destination); err == nil {
×
362
                                if ones, _ := cidr.Mask.Size(); ones == 0 {
×
363
                                        hasDefaultRoute[util.CheckProtocol(r.Gateway)] = true
×
364
                                }
×
365
                        }
366
                }
367
                if len(hasDefaultRoute) != 0 {
×
368
                        // remove existing default route so other CNI plugins, such as macvlan, can add the new default route correctly
×
369
                        if err = csh.removeDefaultRoute(podRequest.NetNs, hasDefaultRoute[kubeovnv1.ProtocolIPv4], hasDefaultRoute[kubeovnv1.ProtocolIPv6]); err != nil {
×
370
                                errMsg := fmt.Errorf("failed to remove existing default route for interface %s of pod %s/%s: %w", podRequest.IfName, podRequest.PodNamespace, podRequest.PodName, err)
×
371
                                klog.Error(errMsg)
×
372
                                if err = resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
373
                                        klog.Errorf("failed to write response: %v", err)
×
374
                                }
×
375
                                return
×
376
                        }
377
                }
378
        }
379

380
        response := &request.CniResponse{
×
381
                Protocol:   util.CheckProtocol(cidr),
×
382
                IPAddress:  ip,
×
383
                MacAddress: macAddr,
×
384
                CIDR:       cidr,
×
385
                PodNicName: podNicName,
×
386
                Routes:     routes,
×
387
                Mtu:        mtu,
×
388
        }
×
389
        if isDefaultRoute {
×
390
                response.Gateway = gw
×
391
        }
×
392
        if err := resp.WriteHeaderAndEntity(http.StatusOK, response); err != nil {
×
393
                klog.Errorf("failed to write response, %v", err)
×
394
        }
×
395
}
396

397
func (csh cniServerHandler) UpdateIPCR(podRequest request.CniRequest, subnet, ip string) error {
×
398
        ipCRName := ovs.PodNameToPortName(podRequest.PodName, podRequest.PodNamespace, podRequest.Provider)
×
399
        for range 20 {
×
400
                ipCR, err := csh.KubeOvnClient.KubeovnV1().IPs().Get(context.Background(), ipCRName, metav1.GetOptions{})
×
401
                if err != nil {
×
402
                        err = fmt.Errorf("failed to get ip crd for %s, %w", ip, err)
×
403
                        // maybe create a backup pod with previous annotations
×
404
                        klog.Error(err)
×
405
                } else if ipCR.Spec.NodeName != csh.Config.NodeName {
×
406
                        ipCR := ipCR.DeepCopy()
×
407
                        if ipCR.Labels == nil {
×
408
                                ipCR.Labels = map[string]string{}
×
409
                        }
×
410
                        ipCR.Spec.NodeName = csh.Config.NodeName
×
411
                        ipCR.Spec.AttachIPs = []string{}
×
412
                        ipCR.Labels[subnet] = ""
×
413
                        ipCR.Labels[util.NodeNameLabel] = csh.Config.NodeName
×
414
                        ipCR.Spec.AttachSubnets = []string{}
×
415
                        ipCR.Spec.AttachMacs = []string{}
×
416
                        if _, err := csh.KubeOvnClient.KubeovnV1().IPs().Update(context.Background(), ipCR, metav1.UpdateOptions{}); err != nil {
×
417
                                err = fmt.Errorf("failed to update ip crd for %s, %w", ip, err)
×
418
                                klog.Error(err)
×
419
                        } else {
×
420
                                return nil
×
421
                        }
×
422
                }
423
                if err != nil {
×
424
                        klog.Warningf("wait pod ip %s to be ready", ipCRName)
×
425
                        time.Sleep(1 * time.Second)
×
426
                } else {
×
427
                        return nil
×
428
                }
×
429
        }
430
        // update ip spec node is not that necessary, so we just log the error
431
        return nil
×
432
}
433

434
func (csh cniServerHandler) handleDel(req *restful.Request, resp *restful.Response) {
×
435
        var podRequest request.CniRequest
×
436
        if err := req.ReadEntity(&podRequest); err != nil {
×
437
                errMsg := fmt.Errorf("parse del request failed %w", err)
×
438
                klog.Error(errMsg)
×
439
                if err := resp.WriteHeaderAndEntity(http.StatusBadRequest, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
440
                        klog.Errorf("failed to write response, %v", err)
×
441
                }
×
442
                return
×
443
        }
444

445
        // Try to get the Pod, but if it fails due to not being found, log a warning and continue.
446
        pod, err := csh.Controller.podsLister.Pods(podRequest.PodNamespace).Get(podRequest.PodName)
×
447
        if err != nil && !k8serrors.IsNotFound(err) {
×
448
                errMsg := fmt.Errorf("failed to retrieve Pod %s/%s: %w", podRequest.PodNamespace, podRequest.PodName, err)
×
449
                klog.Error(errMsg)
×
450
                if err := resp.WriteHeaderAndEntity(http.StatusBadRequest, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
451
                        klog.Errorf("failed to write response, %v", err)
×
452
                }
×
453
                return
×
454
        }
455

456
        if podRequest.NetNs == "" {
×
457
                klog.Infof("skip del port request: %v", podRequest)
×
458
                resp.WriteHeader(http.StatusNoContent)
×
459
                return
×
460
        }
×
461

462
        klog.Infof("del port request: %v", podRequest)
×
463
        if err := csh.validatePodRequest(&podRequest); err != nil {
×
464
                klog.Error(err)
×
465
                if err := resp.WriteHeaderAndEntity(http.StatusBadRequest, request.CniResponse{Err: err.Error()}); err != nil {
×
466
                        klog.Errorf("failed to write response, %v", err)
×
467
                }
×
468
                return
×
469
        }
470

471
        var nicType string
×
472
        var vmName string
×
473

×
474
        // If the Pod was found, process its annotations and labels.
×
475
        if pod != nil {
×
476
                if pod.Annotations != nil && (util.IsOvnProvider(podRequest.Provider) || podRequest.CniType == util.CniTypeName) {
×
477
                        subnet := pod.Annotations[fmt.Sprintf(util.LogicalSwitchAnnotationTemplate, podRequest.Provider)]
×
478
                        if subnet != "" {
×
479
                                ip := pod.Annotations[fmt.Sprintf(util.IPAddressAnnotationTemplate, podRequest.Provider)]
×
480
                                if err = csh.Controller.removeEgressConfig(subnet, ip); err != nil {
×
481
                                        errMsg := fmt.Errorf("failed to remove egress configuration: %w", err)
×
482
                                        klog.Error(errMsg)
×
483
                                        if err = resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
484
                                                klog.Errorf("failed to write response, %v", err)
×
485
                                        }
×
486
                                        return
×
487
                                }
488
                        }
489

490
                        switch {
×
491
                        case podRequest.DeviceID != "":
×
492
                                nicType = util.OffloadType
×
493
                        case podRequest.VhostUserSocketVolumeName != "":
×
494
                                nicType = util.DpdkType
×
495
                                if err = removeShortSharedDir(pod, podRequest.VhostUserSocketVolumeName, podRequest.VhostUserSocketConsumption); err != nil {
×
496
                                        klog.Error(err.Error())
×
497
                                        if err = resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: err.Error()}); err != nil {
×
498
                                                klog.Errorf("failed to write response: %v", err)
×
499
                                        }
×
500
                                        return
×
501
                                }
502
                        default:
×
503
                                nicType = pod.Annotations[fmt.Sprintf(util.PodNicAnnotationTemplate, podRequest.Provider)]
×
504
                        }
505

506
                        vmName = pod.Annotations[fmt.Sprintf(util.VMAnnotationTemplate, podRequest.Provider)]
×
507
                        if vmName != "" {
×
508
                                podRequest.PodName = vmName
×
509
                        }
×
510
                }
511
        } else {
×
512
                // If the Pod is not found, assign a default value.
×
513
                klog.Warningf("Pod %s not found, proceeding with NIC deletion using ContainerID and NetNs", podRequest.PodName)
×
514
                switch {
×
515
                case podRequest.DeviceID != "":
×
516
                        nicType = util.OffloadType
×
517
                case podRequest.VhostUserSocketVolumeName != "":
×
518
                        nicType = util.DpdkType
×
519
                default:
×
520
                        nicType = util.VethType
×
521
                }
522
        }
523

524
        // For Support kubevirt hotplug dpdk nic, forbidden set the volume name
525
        if podRequest.VhostUserSocketConsumption == util.ConsumptionKubevirt {
×
526
                podRequest.VhostUserSocketVolumeName = util.VhostUserSocketVolumeName
×
527
        }
×
528

529
        // Proceed to delete the NIC regardless of whether the Pod was found or not.
530
        err = csh.deleteNic(podRequest.PodName, podRequest.PodNamespace, podRequest.ContainerID, podRequest.NetNs, podRequest.DeviceID, podRequest.IfName, nicType)
×
531
        if err != nil {
×
532
                errMsg := fmt.Errorf("del nic failed %w", err)
×
533
                klog.Error(errMsg)
×
534
                if err := resp.WriteHeaderAndEntity(http.StatusInternalServerError, request.CniResponse{Err: errMsg.Error()}); err != nil {
×
535
                        klog.Errorf("failed to write response, %v", err)
×
536
                }
×
537
                return
×
538
        }
539
        resp.WriteHeader(http.StatusNoContent)
×
540
}
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc