Skip to content

Commit 6293704

Browse files
aserdeanaserdean
committed
add and enable a bunch of features
Signed-off-by: Alin Serdean <aserdean@nvidia.com>
1 parent cff70b1 commit 6293704

File tree

5 files changed

+75
-31
lines changed

5 files changed

+75
-31
lines changed

‎helm/ovn-kubernetes-dpf/templates/control-plane-manifests.yaml‎

Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -254,17 +254,19 @@ spec:
254254
- name: OVN_HYBRID_OVERLAY_ENABLE
255255
value: ""
256256
- name: OVN_ADMIN_NETWORK_POLICY_ENABLE
257-
value: ""
257+
value: {{ .Values.adminNetworkPolicy.enable | quote }}
258258
- name: OVN_EGRESSIP_ENABLE
259-
value: ""
259+
value: {{ .Values.egress.ipEnable | quote }}
260260
- name: OVN_EGRESSSERVICE_ENABLE
261-
value: ""
261+
value: {{ .Values.egress.serviceEnable | quote }}
262262
- name: OVN_EGRESSFIREWALL_ENABLE
263-
value: ""
263+
value: {{ .Values.egress.firewallEnable | quote }}
264264
- name: OVN_EGRESSQOS_ENABLE
265-
value: ""
265+
value: {{ .Values.egress.qosEnable | quote }}
266+
- name: OVN_NETWORK_QOS_ENABLE
267+
value: {{ .Values.qos.enable | quote }}
266268
- name: OVN_MULTI_NETWORK_ENABLE
267-
value: "false"
269+
value: {{ .Values.multiNetwork.enable | quote }}
268270
- name: OVN_HYBRID_OVERLAY_NET_CIDR
269271
value: ""
270272
- name: OVN_DISABLE_SNAT_MULTIPLE_GWS
@@ -280,11 +282,11 @@ spec:
280282
- name: OVN_GATEWAY_MODE
281283
value: shared
282284
- name: OVN_MULTICAST_ENABLE
283-
value: ""
285+
value: {{ .Values.multicast.enable | quote }}
284286
- name: OVN_ACL_LOGGING_RATE_LIMIT
285-
value: "20"
287+
value: {{ .Values.networkPolicy.aclLoggingRateLimit | quote }}
286288
- name: OVN_STATELESS_NETPOL_ENABLE
287-
value: "true"
289+
value: {{ .Values.networkPolicy.statelessEnable | quote }}
288290
- name: OVN_HOST_NETWORK_NAMESPACE
289291
valueFrom:
290292
configMapKeyRef:

‎helm/ovn-kubernetes-dpf/templates/dpu-manifests.yaml‎

Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -555,7 +555,7 @@ spec:
555555
memory: 300Mi
556556
env:
557557
- name: OVN_EGRESSSERVICE_ENABLE
558-
value: ""
558+
value: {{ .Values.egress.serviceEnable | quote }}
559559
- name: OVN_DAEMONSET_VERSION
560560
value: "1.1.0"
561561
- name: OVNKUBE_LOGLEVEL
@@ -619,15 +619,17 @@ spec:
619619
- name: OVN_HYBRID_OVERLAY_ENABLE
620620
value: ""
621621
- name: OVN_ADMIN_NETWORK_POLICY_ENABLE
622-
value: ""
622+
value: {{ .Values.adminNetworkPolicy.enable | quote }}
623623
- name: OVN_EGRESSIP_ENABLE
624-
value: ""
624+
value: {{ .Values.egress.ipEnable | quote }}
625625
- name: OVN_EGRESSIP_HEALTHCHECK_PORT
626626
value: "9107"
627627
- name: OVN_EGRESSFIREWALL_ENABLE
628-
value: ""
628+
value: {{ .Values.egress.firewallEnable | quote }}
629629
- name: OVN_EGRESSQOS_ENABLE
630-
value: ""
630+
value: {{ .Values.egress.qosEnable | quote }}
631+
- name: OVN_NETWORK_QOS_ENABLE
632+
value: {{ .Values.qos.enable | quote }}
631633
- name: OVN_HYBRID_OVERLAY_NET_CIDR
632634
value: ""
633635
- name: OVN_DISABLE_SNAT_MULTIPLE_GWS
@@ -659,7 +661,7 @@ spec:
659661
- name: OVN_V6_MASQUERADE_SUBNET
660662
value: "fd69::/112"
661663
- name: OVN_MULTICAST_ENABLE
662-
value: ""
664+
value: {{ .Values.multicast.enable | quote }}
663665
- name: OVN_UNPRIVILEGED_MODE
664666
value: "no"
665667
- name: OVN_EX_GW_NETWORK_INTERFACE
@@ -681,13 +683,13 @@ spec:
681683
- name: OVN_LFLOW_CACHE_LIMIT_KB
682684
value: ""
683685
- name: OVN_MULTI_NETWORK_ENABLE
684-
value: "false"
686+
value: {{ .Values.multiNetwork.enable | quote }}
685687
- name: OVN_EMPTY_LB_EVENTS
686688
value: ""
687689
- name: OVN_ACL_LOGGING_RATE_LIMIT
688-
value: "20"
690+
value: {{ .Values.networkPolicy.aclLoggingRateLimit | quote }}
689691
- name: OVN_STATELESS_NETPOL_ENABLE
690-
value: "true"
692+
value: {{ .Values.networkPolicy.statelessEnable | quote }}
691693
- name: OVN_HOST_NETWORK_NAMESPACE
692694
valueFrom:
693695
configMapKeyRef:

‎helm/ovn-kubernetes-dpf/templates/host-with-dpu-manifests.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -211,13 +211,13 @@ spec:
211211
- name: OVN_HYBRID_OVERLAY_ENABLE
212212
value: ""
213213
- name: OVN_ADMIN_NETWORK_POLICY_ENABLE
214-
value: ""
214+
value: {{ .Values.adminNetworkPolicy.enable | quote }}
215215
- name: OVN_EGRESSIP_ENABLE
216-
value: ""
216+
value: {{ .Values.egress.ipEnable | quote }}
217217
- name: OVN_EGRESSIP_HEALTHCHECK_PORT
218218
value: "9107"
219219
- name: OVN_EGRESSSERVICE_ENABLE
220-
value: ""
220+
value: {{ .Values.egress.serviceEnable | quote }}
221221
- name: OVN_HYBRID_OVERLAY_NET_CIDR
222222
value: ""
223223
- name: OVN_DISABLE_SNAT_MULTIPLE_GWS
@@ -249,7 +249,7 @@ spec:
249249
- name: OVN_V6_MASQUERADE_SUBNET
250250
value: "fd69::/112"
251251
- name: OVN_MULTICAST_ENABLE
252-
value: ""
252+
value: {{ .Values.multicast.enable | quote }}
253253
- name: OVN_UNPRIVILEGED_MODE
254254
value: "no"
255255
- name: OVN_EX_GW_NETWORK_INTERFACE

‎helm/ovn-kubernetes-dpf/templates/host-without-dpu-manifests.yaml‎

Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -344,7 +344,7 @@ spec:
344344
memory: 300Mi
345345
env:
346346
- name: OVN_EGRESSSERVICE_ENABLE
347-
value: ""
347+
value: {{ .Values.egress.serviceEnable | quote }}
348348
- name: OVN_DAEMONSET_VERSION
349349
value: "1.1.0"
350350
- name: OVNKUBE_LOGLEVEL
@@ -406,15 +406,17 @@ spec:
406406
- name: OVN_HYBRID_OVERLAY_ENABLE
407407
value: ""
408408
- name: OVN_ADMIN_NETWORK_POLICY_ENABLE
409-
value: ""
409+
value: {{ .Values.adminNetworkPolicy.enable | quote }}
410410
- name: OVN_EGRESSIP_ENABLE
411-
value: ""
411+
value: {{ .Values.egress.ipEnable | quote }}
412412
- name: OVN_EGRESSIP_HEALTHCHECK_PORT
413413
value: "9107"
414414
- name: OVN_EGRESSFIREWALL_ENABLE
415-
value: ""
415+
value: {{ .Values.egress.firewallEnable | quote }}
416416
- name: OVN_EGRESSQOS_ENABLE
417-
value: ""
417+
value: {{ .Values.egress.qosEnable | quote }}
418+
- name: OVN_NETWORK_QOS_ENABLE
419+
value: {{ .Values.qos.enable | quote }}
418420
- name: OVN_HYBRID_OVERLAY_NET_CIDR
419421
value: ""
420422
- name: OVN_DISABLE_SNAT_MULTIPLE_GWS
@@ -446,7 +448,7 @@ spec:
446448
- name: OVN_V6_MASQUERADE_SUBNET
447449
value: "fd69::/112"
448450
- name: OVN_MULTICAST_ENABLE
449-
value: ""
451+
value: {{ .Values.multicast.enable | quote }}
450452
- name: OVN_UNPRIVILEGED_MODE
451453
value: "no"
452454
- name: OVN_EX_GW_NETWORK_INTERFACE
@@ -468,15 +470,15 @@ spec:
468470
- name: OVN_LFLOW_CACHE_LIMIT_KB
469471
value: ""
470472
- name: OVN_MULTI_NETWORK_ENABLE
471-
value: "false"
473+
value: {{ .Values.multiNetwork.enable | quote }}
472474
- name: OVNKUBE_NODE_MGMT_PORT_NETDEV
473475
value: ""
474476
- name: OVN_EMPTY_LB_EVENTS
475477
value: ""
476478
- name: OVN_ACL_LOGGING_RATE_LIMIT
477-
value: "20"
479+
value: {{ .Values.networkPolicy.aclLoggingRateLimit | quote }}
478480
- name: OVN_STATELESS_NETPOL_ENABLE
479-
value: "true"
481+
value: {{ .Values.networkPolicy.statelessEnable | quote }}
480482
- name: OVN_HOST_NETWORK_NAMESPACE
481483
valueFrom:
482484
configMapKeyRef:

‎helm/ovn-kubernetes-dpf/values.yaml‎

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,44 @@ resourceName: nvidia.com/bf3-p0-vfs
1111
# -- The name of the NetworkAttachmentDefinition
1212
nadName: dpf-ovn-kubernetes
1313

14+
# -- Egress feature configuration (applies to all manifests)
15+
egress:
16+
# -- Enable EgressIP feature
17+
ipEnable: true
18+
# -- Enable EgressService feature
19+
serviceEnable: true
20+
# -- Enable EgressFirewall feature
21+
firewallEnable: true
22+
# -- Enable EgressQoS feature
23+
qosEnable: true
24+
25+
# -- Multi-network (UDN - User Defined Network) feature configuration (applies to all manifests)
26+
multiNetwork:
27+
# -- Enable multi-network/UDN support
28+
enable: true
29+
30+
# -- Admin Network Policy feature configuration (applies to all manifests)
31+
adminNetworkPolicy:
32+
# -- Enable Admin Network Policy support
33+
enable: true
34+
35+
# -- Multicast feature configuration (applies to all manifests)
36+
multicast:
37+
# -- Enable multicast support
38+
enable: true
39+
40+
# -- Network policy configuration (applies to all manifests)
41+
networkPolicy:
42+
# -- Enable stateless network policy mode for better performance
43+
statelessEnable: true
44+
# -- ACL logging rate limit (logs per second)
45+
aclLoggingRateLimit: 20
46+
47+
# -- QoS (Quality of Service) feature configuration (applies to all manifests)
48+
qos:
49+
# -- Enable OVN native network QoS support for bandwidth limiting
50+
enable: true
51+
1452
# -- Variables related to manifests that are deployed for nodes with DPU
1553
nodeWithDPUManifests:
1654
enabled: false

0 commit comments

Comments
 (0)