Nadia Pinaeva

Create NPEP-127 for external ingress endpoints

7

An attempt to collect use cases for external ingress endpoints. Reviews and more examples are welcome. Tracking issue https://github.com/kubernetes-sigs/network-policy-api/issues/127

**Is your enhancement request related to a problem? Please describe.** Services can't be used in (B)ANP allow rules. Current idea of (B)ANP being applied after the service IP is resolved...

I am using a different receive method from what this package provides, but my code would really benefit from the parsing method being public.

This will allow us to simplify update-codegen script and generate apis in place

[ENHANCEMENT] add dry-run mode for ANP/BANP

36

**Is your enhancement request related to a problem? Please describe.** Users may want to ensure no unexpected connections will be denied by a new (B)ANP. A dry-run mode should not...

Beginning of the story and the first commit from https://github.com/ovn-org/ovn-kubernetes/pull/4386 Switch to level-driven controller to avoid dependency between node handler and ef node handler. If EF handler is ever deadlocked...

e2e ipv6 egress firewall fix

1

testing

debugging ecmp failure

OVN-Observability: enable sampling-based observability

2

Observability feature uses OVN sampling functionality to generate samples with requested metadata when specific OVS flows are matched. See docs commit for more info. Last commit contains hacked dockerfile with...

debug e2e

1

https://github.com/ovn-org/ovn-kubernetes/actions/runs/9892456221/job/27326607697?pr=4513 shows that client pod can't connect to the external pod after 1.5 minutes before any egress firewalls.