kubeovn / kube-ovn / 20330086341

23%

Build Type

push

github

Committed by web-flow

Commit Message

feat: add vendor tagging for OVN resources and migration support (#6001)

Add vendor=kube-ovn externalID to all OVN resources created by kube-ovn
to distinguish them from resources created by external systems like
OpenStack Neutron. This prevents kube-ovn from accidentally garbage
collecting or modifying resources it doesn't own.

Changes:
- Add version tracking in NBGlobal.ExternalIDs["kube-ovn-version"]
- Add migration that runs only when upgrading from versions < v1.15.0
- Auto-tag new resources: AddressSet, PortGroup, LoadBalancer,
  LogicalRouterPort, ACL
- Update GC functions to only operate on vendor=kube-ovn resources
- Update CleanNoParentKeyAcls to skip non-kube-ovn ACLs
- Add pattern matching to identify existing kube-ovn resources during
  migration (security groups, network policies, load balancers)

The migration identifies kube-ovn resources using:
- Existing externalIDs (lr, ls, sg, parent, subnet)
- Naming patterns (ovn.sg.*, cluster-*-loadbalancer, vpc-*-load)
- Association with tagged logical routers/switches

Resources that cannot be positively identified as kube-ovn owned are
left untouched to avoid interfering with external systems.

Fixes: #5995

Signed-off-by: Kevin Carter <kevin.carter@rackspace.com>

Run Details

268 of 468 new or added lines in 9 files covered. (57.26%)

2 existing lines in 1 file now uncovered.

12044 of 53136 relevant lines covered (22.67%)

0.26 hits per line