• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

kubeovn / kube-ovn / 20088831986

10 Dec 2025 05:52AM UTC coverage: 21.399% (-0.06%) from 21.458%
20088831986

push

github

changluyi
remove no need code

Signed-off-by: clyi <clyi@alauda.io>

10643 of 49736 relevant lines covered (21.4%)

0.25 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

0.0
/pkg/daemon/controller.go
1
package daemon
2

3
import (
4
        "context"
5
        "fmt"
6
        "slices"
7
        "strconv"
8
        "strings"
9
        "time"
10

11
        nadutils "github.com/k8snetworkplumbingwg/network-attachment-definition-client/pkg/utils"
12
        "github.com/scylladb/go-set/strset"
13
        v1 "k8s.io/api/core/v1"
14
        k8serrors "k8s.io/apimachinery/pkg/api/errors"
15
        metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
16
        utilruntime "k8s.io/apimachinery/pkg/util/runtime"
17
        "k8s.io/apimachinery/pkg/util/wait"
18
        "k8s.io/client-go/informers"
19
        "k8s.io/client-go/kubernetes/scheme"
20
        typedcorev1 "k8s.io/client-go/kubernetes/typed/core/v1"
21
        listerv1 "k8s.io/client-go/listers/core/v1"
22
        "k8s.io/client-go/tools/cache"
23
        "k8s.io/client-go/tools/record"
24
        "k8s.io/client-go/util/workqueue"
25
        "k8s.io/klog/v2"
26
        k8sexec "k8s.io/utils/exec"
27

28
        kubeovnv1 "github.com/kubeovn/kube-ovn/pkg/apis/kubeovn/v1"
29
        kubeovninformer "github.com/kubeovn/kube-ovn/pkg/client/informers/externalversions"
30
        kubeovnlister "github.com/kubeovn/kube-ovn/pkg/client/listers/kubeovn/v1"
31
        "github.com/kubeovn/kube-ovn/pkg/ovs"
32
        "github.com/kubeovn/kube-ovn/pkg/util"
33
)
34

35
// Controller watch pod and namespace changes to update iptables, ipset and ovs qos
36
type Controller struct {
37
        config *Configuration
38

39
        providerNetworksLister          kubeovnlister.ProviderNetworkLister
40
        providerNetworksSynced          cache.InformerSynced
41
        addOrUpdateProviderNetworkQueue workqueue.TypedRateLimitingInterface[string]
42
        deleteProviderNetworkQueue      workqueue.TypedRateLimitingInterface[*kubeovnv1.ProviderNetwork]
43

44
        vlansLister kubeovnlister.VlanLister
45
        vlansSynced cache.InformerSynced
46

47
        subnetsLister kubeovnlister.SubnetLister
48
        subnetsSynced cache.InformerSynced
49
        subnetQueue   workqueue.TypedRateLimitingInterface[*subnetEvent]
50

51
        ovnEipsLister kubeovnlister.OvnEipLister
52
        ovnEipsSynced cache.InformerSynced
53

54
        podsLister     listerv1.PodLister
55
        podsSynced     cache.InformerSynced
56
        updatePodQueue workqueue.TypedRateLimitingInterface[string]
57
        deletePodQueue workqueue.TypedRateLimitingInterface[*podEvent]
58

59
        nodesLister listerv1.NodeLister
60
        nodesSynced cache.InformerSynced
61

62
        servicesLister listerv1.ServiceLister
63
        servicesSynced cache.InformerSynced
64
        serviceQueue   workqueue.TypedRateLimitingInterface[*serviceEvent]
65

66
        recorder record.EventRecorder
67

68
        protocol string
69

70
        ControllerRuntime
71
        localPodName   string
72
        localNamespace string
73

74
        k8sExec k8sexec.Interface
75
}
76

77
func newTypedRateLimitingQueue[T comparable](name string, rateLimiter workqueue.TypedRateLimiter[T]) workqueue.TypedRateLimitingInterface[T] {
×
78
        if rateLimiter == nil {
×
79
                rateLimiter = workqueue.DefaultTypedControllerRateLimiter[T]()
×
80
        }
×
81
        return workqueue.NewTypedRateLimitingQueueWithConfig(rateLimiter, workqueue.TypedRateLimitingQueueConfig[T]{Name: name})
×
82
}
83

84
// NewController init a daemon controller
85
func NewController(config *Configuration, stopCh <-chan struct{}, podInformerFactory, nodeInformerFactory informers.SharedInformerFactory, kubeovnInformerFactory kubeovninformer.SharedInformerFactory) (*Controller, error) {
×
86
        eventBroadcaster := record.NewBroadcaster()
×
87
        eventBroadcaster.StartLogging(klog.Infof)
×
88
        eventBroadcaster.StartRecordingToSink(&typedcorev1.EventSinkImpl{Interface: config.KubeClient.CoreV1().Events(v1.NamespaceAll)})
×
89
        recorder := eventBroadcaster.NewRecorder(scheme.Scheme, v1.EventSource{Component: config.NodeName})
×
90
        providerNetworkInformer := kubeovnInformerFactory.Kubeovn().V1().ProviderNetworks()
×
91
        vlanInformer := kubeovnInformerFactory.Kubeovn().V1().Vlans()
×
92
        subnetInformer := kubeovnInformerFactory.Kubeovn().V1().Subnets()
×
93
        ovnEipInformer := kubeovnInformerFactory.Kubeovn().V1().OvnEips()
×
94
        podInformer := podInformerFactory.Core().V1().Pods()
×
95
        nodeInformer := nodeInformerFactory.Core().V1().Nodes()
×
96
        servicesInformer := nodeInformerFactory.Core().V1().Services()
×
97

×
98
        controller := &Controller{
×
99
                config: config,
×
100

×
101
                providerNetworksLister:          providerNetworkInformer.Lister(),
×
102
                providerNetworksSynced:          providerNetworkInformer.Informer().HasSynced,
×
103
                addOrUpdateProviderNetworkQueue: newTypedRateLimitingQueue[string]("AddOrUpdateProviderNetwork", nil),
×
104
                deleteProviderNetworkQueue:      newTypedRateLimitingQueue[*kubeovnv1.ProviderNetwork]("DeleteProviderNetwork", nil),
×
105

×
106
                vlansLister: vlanInformer.Lister(),
×
107
                vlansSynced: vlanInformer.Informer().HasSynced,
×
108

×
109
                subnetsLister: subnetInformer.Lister(),
×
110
                subnetsSynced: subnetInformer.Informer().HasSynced,
×
111
                subnetQueue:   newTypedRateLimitingQueue[*subnetEvent]("Subnet", nil),
×
112

×
113
                ovnEipsLister: ovnEipInformer.Lister(),
×
114
                ovnEipsSynced: ovnEipInformer.Informer().HasSynced,
×
115

×
116
                podsLister:     podInformer.Lister(),
×
117
                podsSynced:     podInformer.Informer().HasSynced,
×
118
                updatePodQueue: newTypedRateLimitingQueue[string]("UpdatePod", nil),
×
119
                deletePodQueue: newTypedRateLimitingQueue[*podEvent]("DeletePod", nil),
×
120

×
121
                nodesLister: nodeInformer.Lister(),
×
122
                nodesSynced: nodeInformer.Informer().HasSynced,
×
123

×
124
                servicesLister: servicesInformer.Lister(),
×
125
                servicesSynced: servicesInformer.Informer().HasSynced,
×
126
                serviceQueue:   newTypedRateLimitingQueue[*serviceEvent]("Service", nil),
×
127

×
128
                recorder: recorder,
×
129
                k8sExec:  k8sexec.New(),
×
130
        }
×
131

×
132
        node, err := config.KubeClient.CoreV1().Nodes().Get(context.Background(), config.NodeName, metav1.GetOptions{})
×
133
        if err != nil {
×
134
                util.LogFatalAndExit(err, "failed to get node %s info", config.NodeName)
×
135
        }
×
136
        controller.protocol = util.CheckProtocol(node.Annotations[util.IPAddressAnnotation])
×
137

×
138
        if err = controller.initRuntime(); err != nil {
×
139
                return nil, err
×
140
        }
×
141

142
        podInformerFactory.Start(stopCh)
×
143
        nodeInformerFactory.Start(stopCh)
×
144
        kubeovnInformerFactory.Start(stopCh)
×
145

×
146
        if !cache.WaitForCacheSync(stopCh,
×
147
                controller.providerNetworksSynced, controller.vlansSynced, controller.subnetsSynced,
×
148
                controller.podsSynced, controller.nodesSynced, controller.servicesSynced) {
×
149
                util.LogFatalAndExit(nil, "failed to wait for caches to sync")
×
150
        }
×
151

152
        if _, err = providerNetworkInformer.Informer().AddEventHandler(cache.ResourceEventHandlerFuncs{
×
153
                AddFunc:    controller.enqueueAddProviderNetwork,
×
154
                UpdateFunc: controller.enqueueUpdateProviderNetwork,
×
155
                DeleteFunc: controller.enqueueDeleteProviderNetwork,
×
156
        }); err != nil {
×
157
                return nil, err
×
158
        }
×
159
        if _, err = vlanInformer.Informer().AddEventHandler(cache.ResourceEventHandlerFuncs{
×
160
                UpdateFunc: controller.enqueueUpdateVlan,
×
161
        }); err != nil {
×
162
                return nil, err
×
163
        }
×
164
        if _, err = subnetInformer.Informer().AddEventHandler(cache.ResourceEventHandlerFuncs{
×
165
                AddFunc:    controller.enqueueAddSubnet,
×
166
                UpdateFunc: controller.enqueueUpdateSubnet,
×
167
                DeleteFunc: controller.enqueueDeleteSubnet,
×
168
        }); err != nil {
×
169
                return nil, err
×
170
        }
×
171
        if _, err = servicesInformer.Informer().AddEventHandler(cache.ResourceEventHandlerFuncs{
×
172
                AddFunc:    controller.enqueueAddService,
×
173
                DeleteFunc: controller.enqueueDeleteService,
×
174
                UpdateFunc: controller.enqueueUpdateService,
×
175
        }); err != nil {
×
176
                util.LogFatalAndExit(err, "failed to add service event handler")
×
177
        }
×
178

179
        if _, err = podInformer.Informer().AddEventHandler(cache.ResourceEventHandlerFuncs{
×
180
                UpdateFunc: controller.enqueueUpdatePod,
×
181
                DeleteFunc: controller.enqueueDeletePod,
×
182
        }); err != nil {
×
183
                return nil, err
×
184
        }
×
185

186
        return controller, nil
×
187
}
188

189
func (c *Controller) enqueueAddProviderNetwork(obj any) {
×
190
        key := cache.MetaObjectToName(obj.(*kubeovnv1.ProviderNetwork)).String()
×
191
        klog.V(3).Infof("enqueue add provider network %s", key)
×
192
        c.addOrUpdateProviderNetworkQueue.Add(key)
×
193
}
×
194

195
func (c *Controller) enqueueUpdateProviderNetwork(_, newObj any) {
×
196
        key := cache.MetaObjectToName(newObj.(*kubeovnv1.ProviderNetwork)).String()
×
197
        klog.V(3).Infof("enqueue update provider network %s", key)
×
198
        c.addOrUpdateProviderNetworkQueue.Add(key)
×
199
}
×
200

201
func (c *Controller) enqueueDeleteProviderNetwork(obj any) {
×
202
        var pn *kubeovnv1.ProviderNetwork
×
203
        switch t := obj.(type) {
×
204
        case *kubeovnv1.ProviderNetwork:
×
205
                pn = t
×
206
        case cache.DeletedFinalStateUnknown:
×
207
                p, ok := t.Obj.(*kubeovnv1.ProviderNetwork)
×
208
                if !ok {
×
209
                        klog.Warningf("unexpected object type: %T", t.Obj)
×
210
                        return
×
211
                }
×
212
                pn = p
×
213
        default:
×
214
                klog.Warningf("unexpected type: %T", obj)
×
215
                return
×
216
        }
217

218
        key := cache.MetaObjectToName(pn).String()
×
219
        klog.V(3).Infof("enqueue delete provider network %s", key)
×
220
        c.deleteProviderNetworkQueue.Add(pn)
×
221
}
222

223
func (c *Controller) runAddOrUpdateProviderNetworkWorker() {
×
224
        for c.processNextAddOrUpdateProviderNetworkWorkItem() {
×
225
        }
×
226
}
227

228
func (c *Controller) runDeleteProviderNetworkWorker() {
×
229
        for c.processNextDeleteProviderNetworkWorkItem() {
×
230
        }
×
231
}
232

233
func (c *Controller) processNextAddOrUpdateProviderNetworkWorkItem() bool {
×
234
        key, shutdown := c.addOrUpdateProviderNetworkQueue.Get()
×
235
        if shutdown {
×
236
                return false
×
237
        }
×
238

239
        err := func(key string) error {
×
240
                defer c.addOrUpdateProviderNetworkQueue.Done(key)
×
241
                if err := c.handleAddOrUpdateProviderNetwork(key); err != nil {
×
242
                        return fmt.Errorf("error syncing %q: %w, requeuing", key, err)
×
243
                }
×
244
                c.addOrUpdateProviderNetworkQueue.Forget(key)
×
245
                return nil
×
246
        }(key)
247
        if err != nil {
×
248
                utilruntime.HandleError(err)
×
249
                c.addOrUpdateProviderNetworkQueue.AddRateLimited(key)
×
250
                return true
×
251
        }
×
252
        return true
×
253
}
254

255
func (c *Controller) processNextDeleteProviderNetworkWorkItem() bool {
×
256
        obj, shutdown := c.deleteProviderNetworkQueue.Get()
×
257
        if shutdown {
×
258
                return false
×
259
        }
×
260

261
        err := func(obj *kubeovnv1.ProviderNetwork) error {
×
262
                defer c.deleteProviderNetworkQueue.Done(obj)
×
263
                if err := c.handleDeleteProviderNetwork(obj); err != nil {
×
264
                        return fmt.Errorf("error syncing %q: %w, requeuing", obj.Name, err)
×
265
                }
×
266
                c.deleteProviderNetworkQueue.Forget(obj)
×
267
                return nil
×
268
        }(obj)
269
        if err != nil {
×
270
                utilruntime.HandleError(err)
×
271
                c.deleteProviderNetworkQueue.AddRateLimited(obj)
×
272
                return true
×
273
        }
×
274
        return true
×
275
}
276

277
func (c *Controller) handleAddOrUpdateProviderNetwork(key string) error {
×
278
        klog.V(3).Infof("handle update provider network %s", key)
×
279
        node, err := c.nodesLister.Get(c.config.NodeName)
×
280
        if err != nil {
×
281
                klog.Error(err)
×
282
                return err
×
283
        }
×
284
        pn, err := c.providerNetworksLister.Get(key)
×
285
        if err != nil {
×
286
                if k8serrors.IsNotFound(err) {
×
287
                        return nil
×
288
                }
×
289
                klog.Error(err)
×
290
                return err
×
291
        }
292

293
        if slices.Contains(pn.Spec.ExcludeNodes, node.Name) {
×
294
                c.recordProviderNetworkErr(pn.Name, "")
×
295
                return c.cleanProviderNetwork(pn.DeepCopy(), node.DeepCopy())
×
296
        }
×
297
        return c.initProviderNetwork(pn.DeepCopy(), node.DeepCopy())
×
298
}
299

300
func (c *Controller) initProviderNetwork(pn *kubeovnv1.ProviderNetwork, node *v1.Node) error {
×
301
        nic := pn.Spec.DefaultInterface
×
302
        for _, item := range pn.Spec.CustomInterfaces {
×
303
                if slices.Contains(item.Nodes, node.Name) {
×
304
                        nic = item.Interface
×
305
                        break
×
306
                }
307
        }
308

309
        patch := util.KVPatch{
×
310
                fmt.Sprintf(util.ProviderNetworkReadyTemplate, pn.Name):     nil,
×
311
                fmt.Sprintf(util.ProviderNetworkInterfaceTemplate, pn.Name): nil,
×
312
                fmt.Sprintf(util.ProviderNetworkMtuTemplate, pn.Name):       nil,
×
313
                fmt.Sprintf(util.ProviderNetworkExcludeTemplate, pn.Name):   nil,
×
314
        }
×
315

×
316
        vlans := strset.NewWithSize(len(pn.Status.Vlans) + 1)
×
317
        for _, vlanName := range pn.Status.Vlans {
×
318
                vlan, err := c.vlansLister.Get(vlanName)
×
319
                if err != nil {
×
320
                        if k8serrors.IsNotFound(err) {
×
321
                                klog.Infof("vlan %s not found", vlanName)
×
322
                                continue
×
323
                        }
324
                        klog.Errorf("failed to get vlan %q: %v", vlanName, err)
×
325
                        return err
×
326
                }
327
                vlans.Add(strconv.Itoa(vlan.Spec.ID))
×
328
        }
329
        // always add trunk 0 so that the ovs bridge can communicate with the external network
330
        vlans.Add("0")
×
331

×
332
        if pn.Spec.AutoCreateVlanSubinterfaces && strings.Contains(nic, ".") {
×
333
                parts := strings.SplitN(nic, ".", 2)
×
334
                parentIf := parts[0]
×
335
                if !util.CheckInterfaceExists(nic) {
×
336
                        klog.Infof("Auto-create enabled: creating default VLAN subinterface %s on %s", nic, parentIf)
×
337
                        if err := c.createVlanSubinterfaces([]string{nic}, parentIf, pn.Name); err != nil {
×
338
                                klog.Errorf("Failed to create default VLAN subinterface %s: %v", nic, err)
×
339
                                return err
×
340
                        }
×
341
                } else {
×
342
                        klog.V(3).Infof("Default VLAN subinterface %s already exists, skipping creation", nic)
×
343
                }
×
344
        }
345

346
        var mtu int
×
347
        var err error
×
348
        klog.V(3).Infof("ovs init provider network %s", pn.Name)
×
349
        if mtu, err = c.ovsInitProviderNetwork(pn.Name, nic, vlans.List(), pn.Spec.ExchangeLinkName, c.config.MacLearningFallback); err != nil {
×
350
                delete(patch, fmt.Sprintf(util.ProviderNetworkExcludeTemplate, pn.Name))
×
351
                if err1 := util.PatchLabels(c.config.KubeClient.CoreV1().Nodes(), node.Name, patch); err1 != nil {
×
352
                        klog.Errorf("failed to patch annotations of node %s: %v", node.Name, err1)
×
353
                }
×
354
                c.recordProviderNetworkErr(pn.Name, err.Error())
×
355
                return err
×
356
        }
357

358
        patch[fmt.Sprintf(util.ProviderNetworkReadyTemplate, pn.Name)] = "true"
×
359
        patch[fmt.Sprintf(util.ProviderNetworkInterfaceTemplate, pn.Name)] = nic
×
360
        patch[fmt.Sprintf(util.ProviderNetworkMtuTemplate, pn.Name)] = strconv.Itoa(mtu)
×
361
        if err = util.PatchLabels(c.config.KubeClient.CoreV1().Nodes(), node.Name, patch); err != nil {
×
362
                klog.Errorf("failed to patch labels of node %s: %v", node.Name, err)
×
363
                return err
×
364
        }
×
365
        c.recordProviderNetworkErr(pn.Name, "")
×
366
        return nil
×
367
}
368

369
func (c *Controller) recordProviderNetworkErr(providerNetwork, errMsg string) {
×
370
        var currentPod *v1.Pod
×
371
        var err error
×
372
        if c.localPodName == "" {
×
373
                pods, err := c.config.KubeClient.CoreV1().Pods(v1.NamespaceAll).List(context.Background(), metav1.ListOptions{
×
374
                        LabelSelector: "app=kube-ovn-cni",
×
375
                        FieldSelector: "spec.nodeName=" + c.config.NodeName,
×
376
                })
×
377
                if err != nil {
×
378
                        klog.Errorf("failed to list pod: %v", err)
×
379
                        return
×
380
                }
×
381
                for _, pod := range pods.Items {
×
382
                        if pod.Spec.NodeName == c.config.NodeName && pod.Status.Phase == v1.PodRunning {
×
383
                                c.localPodName = pod.Name
×
384
                                c.localNamespace = pod.Namespace
×
385
                                currentPod = &pod
×
386
                                break
×
387
                        }
388
                }
389
                if currentPod == nil {
×
390
                        klog.Warning("failed to get self pod")
×
391
                        return
×
392
                }
×
393
        } else {
×
394
                if currentPod, err = c.podsLister.Pods(c.localNamespace).Get(c.localPodName); err != nil {
×
395
                        klog.Errorf("failed to get pod %s, %v", c.localPodName, err)
×
396
                        return
×
397
                }
×
398
        }
399

400
        patch := util.KVPatch{}
×
401
        if currentPod.Annotations[fmt.Sprintf(util.ProviderNetworkErrMessageTemplate, providerNetwork)] != errMsg {
×
402
                if errMsg == "" {
×
403
                        patch[fmt.Sprintf(util.ProviderNetworkErrMessageTemplate, providerNetwork)] = nil
×
404
                } else {
×
405
                        patch[fmt.Sprintf(util.ProviderNetworkErrMessageTemplate, providerNetwork)] = errMsg
×
406
                }
×
407
                if err = util.PatchAnnotations(c.config.KubeClient.CoreV1().Pods(c.localNamespace), c.localPodName, patch); err != nil {
×
408
                        klog.Errorf("failed to patch pod %s: %v", c.localPodName, err)
×
409
                        return
×
410
                }
×
411
        }
412
}
413

414
func (c *Controller) cleanProviderNetwork(pn *kubeovnv1.ProviderNetwork, node *v1.Node) error {
×
415
        patch := util.KVPatch{
×
416
                fmt.Sprintf(util.ProviderNetworkReadyTemplate, pn.Name):     nil,
×
417
                fmt.Sprintf(util.ProviderNetworkInterfaceTemplate, pn.Name): nil,
×
418
                fmt.Sprintf(util.ProviderNetworkMtuTemplate, pn.Name):       nil,
×
419
                fmt.Sprintf(util.ProviderNetworkExcludeTemplate, pn.Name):   "true",
×
420
        }
×
421
        if err := util.PatchLabels(c.config.KubeClient.CoreV1().Nodes(), node.Name, patch); err != nil {
×
422
                klog.Errorf("failed to patch labels of node %s: %v", node.Name, err)
×
423
                return err
×
424
        }
×
425

426
        return c.ovsCleanProviderNetwork(pn.Name)
×
427
}
428

429
func (c *Controller) handleDeleteProviderNetwork(pn *kubeovnv1.ProviderNetwork) error {
×
430
        if err := c.ovsCleanProviderNetwork(pn.Name); err != nil {
×
431
                klog.Error(err)
×
432
                return err
×
433
        }
×
434

435
        if err := c.cleanupAutoCreatedVlanInterfaces(pn.Name); err != nil {
×
436
                klog.Errorf("Failed to cleanup auto-created VLAN interfaces for provider %s: %v", pn.Name, err)
×
437
                return err
×
438
        }
×
439

440
        node, err := c.nodesLister.Get(c.config.NodeName)
×
441
        if err != nil {
×
442
                klog.Error(err)
×
443
                return err
×
444
        }
×
445
        if len(node.Labels) == 0 {
×
446
                return nil
×
447
        }
×
448

449
        patch := util.KVPatch{
×
450
                fmt.Sprintf(util.ProviderNetworkReadyTemplate, pn.Name):     nil,
×
451
                fmt.Sprintf(util.ProviderNetworkInterfaceTemplate, pn.Name): nil,
×
452
                fmt.Sprintf(util.ProviderNetworkMtuTemplate, pn.Name):       nil,
×
453
                fmt.Sprintf(util.ProviderNetworkExcludeTemplate, pn.Name):   nil,
×
454
        }
×
455
        if err = util.PatchLabels(c.config.KubeClient.CoreV1().Nodes(), node.Name, patch); err != nil {
×
456
                klog.Errorf("failed to patch labels of node %s: %v", node.Name, err)
×
457
                return err
×
458
        }
×
459

460
        return nil
×
461
}
462

463
func (c *Controller) enqueueUpdateVlan(oldObj, newObj any) {
×
464
        oldVlan := oldObj.(*kubeovnv1.Vlan)
×
465
        newVlan := newObj.(*kubeovnv1.Vlan)
×
466
        if oldVlan.Spec.ID != newVlan.Spec.ID {
×
467
                klog.V(3).Infof("enqueue update provider network %q", newVlan.Spec.Provider)
×
468
                c.addOrUpdateProviderNetworkQueue.Add(newVlan.Spec.Provider)
×
469
        }
×
470
}
471

472
type subnetEvent struct {
473
        oldObj, newObj any
474
}
475

476
type serviceEvent struct {
477
        oldObj, newObj any
478
}
479

480
type podEvent struct {
481
        oldObj any
482
}
483

484
func (c *Controller) enqueueAddSubnet(obj any) {
×
485
        c.subnetQueue.Add(&subnetEvent{newObj: obj})
×
486
}
×
487

488
func (c *Controller) enqueueUpdateSubnet(oldObj, newObj any) {
×
489
        c.subnetQueue.Add(&subnetEvent{oldObj: oldObj, newObj: newObj})
×
490
}
×
491

492
func (c *Controller) enqueueDeleteSubnet(obj any) {
×
493
        c.subnetQueue.Add(&subnetEvent{oldObj: obj})
×
494
}
×
495

496
func (c *Controller) runSubnetWorker() {
×
497
        for c.processNextSubnetWorkItem() {
×
498
        }
×
499
}
500

501
func (c *Controller) enqueueAddService(obj any) {
×
502
        c.serviceQueue.Add(&serviceEvent{newObj: obj})
×
503
}
×
504

505
func (c *Controller) enqueueUpdateService(oldObj, newObj any) {
×
506
        c.serviceQueue.Add(&serviceEvent{oldObj: oldObj, newObj: newObj})
×
507
}
×
508

509
func (c *Controller) enqueueDeleteService(obj any) {
×
510
        c.serviceQueue.Add(&serviceEvent{oldObj: obj})
×
511
}
×
512

513
func (c *Controller) runAddOrUpdateServicekWorker() {
×
514
        for c.processNextServiceWorkItem() {
×
515
        }
×
516
}
517

518
func (c *Controller) processNextSubnetWorkItem() bool {
×
519
        obj, shutdown := c.subnetQueue.Get()
×
520
        if shutdown {
×
521
                return false
×
522
        }
×
523

524
        err := func(obj *subnetEvent) error {
×
525
                defer c.subnetQueue.Done(obj)
×
526
                if err := c.reconcileRouters(obj); err != nil {
×
527
                        c.subnetQueue.AddRateLimited(obj)
×
528
                        return fmt.Errorf("error syncing %v: %w, requeuing", obj, err)
×
529
                }
×
530
                c.subnetQueue.Forget(obj)
×
531
                return nil
×
532
        }(obj)
533
        if err != nil {
×
534
                utilruntime.HandleError(err)
×
535
                return true
×
536
        }
×
537
        return true
×
538
}
539

540
func (c *Controller) processNextServiceWorkItem() bool {
×
541
        obj, shutdown := c.serviceQueue.Get()
×
542
        if shutdown {
×
543
                return false
×
544
        }
×
545

546
        err := func(obj *serviceEvent) error {
×
547
                defer c.serviceQueue.Done(obj)
×
548
                if err := c.reconcileServices(obj); err != nil {
×
549
                        c.serviceQueue.AddRateLimited(obj)
×
550
                        return fmt.Errorf("error syncing %v: %w, requeuing", obj, err)
×
551
                }
×
552
                c.serviceQueue.Forget(obj)
×
553
                return nil
×
554
        }(obj)
555
        if err != nil {
×
556
                utilruntime.HandleError(err)
×
557
                return true
×
558
        }
×
559
        return true
×
560
}
561

562
func (c *Controller) enqueueUpdatePod(oldObj, newObj any) {
×
563
        oldPod := oldObj.(*v1.Pod)
×
564
        newPod := newObj.(*v1.Pod)
×
565
        key := cache.MetaObjectToName(newPod).String()
×
566

×
567
        if oldPod.Annotations[util.IngressRateAnnotation] != newPod.Annotations[util.IngressRateAnnotation] ||
×
568
                oldPod.Annotations[util.EgressRateAnnotation] != newPod.Annotations[util.EgressRateAnnotation] ||
×
569
                oldPod.Annotations[util.NetemQosLatencyAnnotation] != newPod.Annotations[util.NetemQosLatencyAnnotation] ||
×
570
                oldPod.Annotations[util.NetemQosJitterAnnotation] != newPod.Annotations[util.NetemQosJitterAnnotation] ||
×
571
                oldPod.Annotations[util.NetemQosLimitAnnotation] != newPod.Annotations[util.NetemQosLimitAnnotation] ||
×
572
                oldPod.Annotations[util.NetemQosLossAnnotation] != newPod.Annotations[util.NetemQosLossAnnotation] ||
×
573
                oldPod.Annotations[util.MirrorControlAnnotation] != newPod.Annotations[util.MirrorControlAnnotation] ||
×
574
                oldPod.Annotations[util.IPAddressAnnotation] != newPod.Annotations[util.IPAddressAnnotation] {
×
575
                c.updatePodQueue.Add(key)
×
576
                return
×
577
        }
×
578

579
        attachNets, err := nadutils.ParsePodNetworkAnnotation(newPod)
×
580
        if err != nil {
×
581
                return
×
582
        }
×
583
        for _, multiNet := range attachNets {
×
584
                provider := fmt.Sprintf("%s.%s.%s", multiNet.Name, multiNet.Namespace, util.OvnProvider)
×
585
                if newPod.Annotations[fmt.Sprintf(util.AllocatedAnnotationTemplate, provider)] == "true" {
×
586
                        if oldPod.Annotations[fmt.Sprintf(util.IngressRateAnnotationTemplate, provider)] != newPod.Annotations[fmt.Sprintf(util.IngressRateAnnotationTemplate, provider)] ||
×
587
                                oldPod.Annotations[fmt.Sprintf(util.EgressRateAnnotationTemplate, provider)] != newPod.Annotations[fmt.Sprintf(util.EgressRateAnnotationTemplate, provider)] ||
×
588
                                oldPod.Annotations[fmt.Sprintf(util.NetemQosLatencyAnnotationTemplate, provider)] != newPod.Annotations[fmt.Sprintf(util.NetemQosLatencyAnnotationTemplate, provider)] ||
×
589
                                oldPod.Annotations[fmt.Sprintf(util.NetemQosJitterAnnotationTemplate, provider)] != newPod.Annotations[fmt.Sprintf(util.NetemQosJitterAnnotationTemplate, provider)] ||
×
590
                                oldPod.Annotations[fmt.Sprintf(util.NetemQosLimitAnnotationTemplate, provider)] != newPod.Annotations[fmt.Sprintf(util.NetemQosLimitAnnotationTemplate, provider)] ||
×
591
                                oldPod.Annotations[fmt.Sprintf(util.NetemQosLossAnnotationTemplate, provider)] != newPod.Annotations[fmt.Sprintf(util.NetemQosLossAnnotationTemplate, provider)] ||
×
592
                                oldPod.Annotations[fmt.Sprintf(util.MirrorControlAnnotationTemplate, provider)] != newPod.Annotations[fmt.Sprintf(util.MirrorControlAnnotationTemplate, provider)] {
×
593
                                c.updatePodQueue.Add(key)
×
594
                        }
×
595
                }
596
        }
597
}
598

599
func (c *Controller) enqueueDeletePod(obj any) {
×
600
        var pod *v1.Pod
×
601
        switch t := obj.(type) {
×
602
        case *v1.Pod:
×
603
                pod = t
×
604
        case cache.DeletedFinalStateUnknown:
×
605
                p, ok := t.Obj.(*v1.Pod)
×
606
                if !ok {
×
607
                        klog.Warningf("unexpected object type: %T", t.Obj)
×
608
                        return
×
609
                }
×
610
                pod = p
×
611
        default:
×
612
                klog.Warningf("unexpected type: %T", obj)
×
613
                return
×
614
        }
615

616
        klog.V(3).Infof("enqueue delete pod %s", pod.Name)
×
617
        c.deletePodQueue.Add(&podEvent{oldObj: pod})
×
618
}
619

620
func (c *Controller) runUpdatePodWorker() {
×
621
        for c.processNextUpdatePodWorkItem() {
×
622
        }
×
623
}
624

625
func (c *Controller) runDeletePodWorker() {
×
626
        for c.processNextDeletePodWorkItem() {
×
627
        }
×
628
}
629

630
func (c *Controller) processNextUpdatePodWorkItem() bool {
×
631
        key, shutdown := c.updatePodQueue.Get()
×
632
        if shutdown {
×
633
                return false
×
634
        }
×
635

636
        err := func(key string) error {
×
637
                defer c.updatePodQueue.Done(key)
×
638
                if err := c.handleUpdatePod(key); err != nil {
×
639
                        c.updatePodQueue.AddRateLimited(key)
×
640
                        return fmt.Errorf("error syncing %q: %w, requeuing", key, err)
×
641
                }
×
642
                c.updatePodQueue.Forget(key)
×
643
                return nil
×
644
        }(key)
645
        if err != nil {
×
646
                utilruntime.HandleError(err)
×
647
                return true
×
648
        }
×
649
        return true
×
650
}
651

652
func (c *Controller) processNextDeletePodWorkItem() bool {
×
653
        event, shutdown := c.deletePodQueue.Get()
×
654
        if shutdown {
×
655
                return false
×
656
        }
×
657

658
        err := func(event *podEvent) error {
×
659
                defer c.deletePodQueue.Done(event)
×
660
                if err := c.handleDeletePod(event); err != nil {
×
661
                        c.deletePodQueue.AddRateLimited(event)
×
662
                        return fmt.Errorf("error syncing pod event: %w, requeuing", err)
×
663
                }
×
664
                c.deletePodQueue.Forget(event)
×
665
                return nil
×
666
        }(event)
667
        if err != nil {
×
668
                utilruntime.HandleError(err)
×
669
                return true
×
670
        }
×
671
        return true
×
672
}
673

674
var lastNoPodOvsPort map[string]bool
675

676
func (c *Controller) markAndCleanInternalPort() error {
×
677
        klog.V(4).Infof("start to gc ovs internal ports")
×
678
        residualPorts := ovs.GetResidualInternalPorts()
×
679
        if len(residualPorts) == 0 {
×
680
                return nil
×
681
        }
×
682

683
        noPodOvsPort := map[string]bool{}
×
684
        for _, portName := range residualPorts {
×
685
                if !lastNoPodOvsPort[portName] {
×
686
                        noPodOvsPort[portName] = true
×
687
                } else {
×
688
                        klog.Infof("gc ovs internal port %s", portName)
×
689
                        // Remove ovs port
×
690
                        output, err := ovs.Exec(ovs.IfExists, "--with-iface", "del-port", "br-int", portName)
×
691
                        if err != nil {
×
692
                                return fmt.Errorf("failed to delete ovs port %w, %q", err, output)
×
693
                        }
×
694
                }
695
        }
696
        lastNoPodOvsPort = noPodOvsPort
×
697

×
698
        return nil
×
699
}
700

701
// Run starts controller
702
func (c *Controller) Run(stopCh <-chan struct{}) {
×
703
        defer utilruntime.HandleCrash()
×
704
        defer c.addOrUpdateProviderNetworkQueue.ShutDown()
×
705
        defer c.deleteProviderNetworkQueue.ShutDown()
×
706
        defer c.subnetQueue.ShutDown()
×
707
        defer c.serviceQueue.ShutDown()
×
708
        defer c.updatePodQueue.ShutDown()
×
709
        defer c.deletePodQueue.ShutDown()
×
710

×
711
        go wait.Until(ovs.CleanLostInterface, time.Minute, stopCh)
×
712
        go wait.Until(recompute, 10*time.Minute, stopCh)
×
713
        go wait.Until(rotateLog, 1*time.Hour, stopCh)
×
714

×
715
        if err := c.setIPSet(); err != nil {
×
716
                util.LogFatalAndExit(err, "failed to set ipsets")
×
717
        }
×
718

719
        klog.Info("Started workers")
×
720
        go wait.Until(c.loopOvn0Check, 5*time.Second, stopCh)
×
721
        go wait.Until(c.loopOvnExt0Check, 5*time.Second, stopCh)
×
722
        go wait.Until(c.loopTunnelCheck, 5*time.Second, stopCh)
×
723
        go wait.Until(c.runAddOrUpdateProviderNetworkWorker, time.Second, stopCh)
×
724
        go wait.Until(c.runAddOrUpdateServicekWorker, time.Second, stopCh)
×
725
        go wait.Until(c.runDeleteProviderNetworkWorker, time.Second, stopCh)
×
726
        go wait.Until(c.runSubnetWorker, time.Second, stopCh)
×
727
        go wait.Until(c.runUpdatePodWorker, time.Second, stopCh)
×
728
        go wait.Until(c.runDeletePodWorker, time.Second, stopCh)
×
729
        go wait.Until(c.runGateway, 3*time.Second, stopCh)
×
730
        go wait.Until(c.loopEncapIPCheck, 3*time.Second, stopCh)
×
731
        go wait.Until(c.ovnMetricsUpdate, 3*time.Second, stopCh)
×
732
        go wait.Until(func() {
×
733
                if err := c.reconcileRouters(nil); err != nil {
×
734
                        klog.Errorf("failed to reconcile ovn0 routes: %v", err)
×
735
                }
×
736
        }, 3*time.Second, stopCh)
737
        go wait.Until(func() {
×
738
                if err := c.markAndCleanInternalPort(); err != nil {
×
739
                        klog.Errorf("gc ovs port error: %v", err)
×
740
                }
×
741
        }, 5*time.Minute, stopCh)
742

743
        if c.config.EnableTProxy {
×
744
                go c.StartTProxyForwarding()
×
745
                go wait.Until(c.runTProxyConfigWorker, 3*time.Second, stopCh)
×
746
                // Using the tproxy method, kubelet's TCP probe packets cannot reach the namespace of the pod of the custom VPC,
×
747
                // so tproxy itself probes the pod of the custom VPC, if probe failed remove the iptable rules from
×
748
                // kubelet to tproxy, if probe success recover the iptable rules
×
749
                go wait.Until(c.StartTProxyTCPPortProbe, 1*time.Second, stopCh)
×
750
        } else {
×
751
                c.cleanTProxyConfig()
×
752
        }
×
753

754
        if c.config.EnableOVNIPSec {
×
755
                go wait.Until(func() {
×
756
                        if err := c.ManageIPSecKeys(); err != nil {
×
757
                                klog.Errorf("manage ipsec keys error: %v", err)
×
758
                        }
×
759
                }, 24*time.Hour, stopCh)
760
        } else {
×
761
                if err := c.StopAndClearIPSecResouce(); err != nil {
×
762
                        klog.Errorf("stop and clear ipsec resource error: %v", err)
×
763
                }
×
764
        }
765

766
        <-stopCh
×
767
        klog.Info("Shutting down workers")
×
768
}
769

770
func recompute() {
×
771
        output, err := ovs.Appctl(ovs.OvnController, "inc-engine/recompute")
×
772
        if err != nil {
×
773
                klog.Errorf("failed to trigger force recompute for %s: %q", ovs.OvnController, output)
×
774
        }
×
775
}
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc