load-balancer-and-ingress-services-for-kubernetes icon indicating copy to clipboard operation
load-balancer-and-ingress-services-for-kubernetes copied to clipboard

AV-203833: Support for restricting FQDN re-use in AKO

Open saurabhvaidvmware opened this issue 1 year ago • 6 comments

Known issue: Cache isn't updated correctly when ingress FQDN is updated in case of single ingress-multi FQDN case. I am working on above issue and UT's for this. Will merge in few days.

UT plan:

  1. Create ingress with FQDN policy set to restrict/open and check if FQDN cache is being populated correctly
  2. Set AKO to strict, create 2 ingresses with same FQDN in different namespaces, 2nd one's model should not be created (should not be processed by AKO)
  3. Set AKO to strict, create 2 ingresses with same FQDN in same namespace, 2nd ingress should not be rejected.
  4. Set AKO to internamespaceallowed, create 2 ingresses with same FQDN in different namespaces, 2nd ingress should not be rejected.
  5. With pre-existing AVI objects, check if AKO correctly builds FQDN reuse policy cache

saurabhvaidvmware avatar Jun 11 '24 07:06 saurabhvaidvmware

@saurabhvaidvmware: Configmap, values.yaml changes are missing. Please include those.

@akshayhavile yes, will add those in next commit, thanks

saurabhvaidvmware avatar Jun 11 '24 19:06 saurabhvaidvmware

build ako

saurabhvaidvmware avatar Jun 19 '24 06:06 saurabhvaidvmware

build ako

saurabhvaidvmware avatar Jun 19 '24 06:06 saurabhvaidvmware

build ako

saurabhvaidvmware avatar Jun 19 '24 06:06 saurabhvaidvmware

@saurabhvaidvmware: Configmap, values.yaml changes are missing. Please include those.

@akshayhavile I've added changes to these files. Thanks

saurabhvaidvmware avatar Jun 19 '24 09:06 saurabhvaidvmware

build ako

saurabhvaidvmware avatar Jun 20 '24 08:06 saurabhvaidvmware

Closing as another PR takes care of the changes.

akshayhavile avatar Oct 09 '24 08:10 akshayhavile