Or Mergi

bridge: Add an option to enable port isolation

1

Enable bridge CNI users set port-isolation [[1]](https://serverfault.com/questions/388544/is-it-possible-to-enable-port-isolation-on-linux-bridges/1017228#1017228) on the interface. Linux-bridge port that is set as isolated cannot communicate with other isolated ports (they can still communicate with non-isolated ports)....

contrib: Enable working with local-registry when using podman

1

## 📑 Description When podman is installed, it impossible to work with a local registry because the automation fail to push images to the local registry. On podman push, it...

CUDN CRD API validations: Use CEL validation to ensure excludeSubnets match spesified subnets

1

### What is this issue about? As of today the CUDN CRD doesnt have API validation to ensure excludeSubnetes match the spesifed subnetes, due to a bug in kube-apiserver [[1]](https://github.com/kubernetes/kubernetes/issues/130441)....

Flaky e2e: "bridge nic-hotunplug a running VM hot-unplug network interface succeed Migration based"

2

# What happened The mentioned test introduced a flake on CI https://prow.ci.kubevirt.io/view/gs/kubevirt-prow/pr-logs/pull/kubevirt_kubevirt/14226/pull-kubevirt-e2e-k8s-1.32-sig-network/1900113488462745600 Flaky test detected: bridge nic-hotunplug a running VM hot-unplug network interface succeed Migration based [1] /kind flake /priority...

virt-operator,gen: Rm duplicate port definition in virt-api Deployment

6

### What this PR does Currently virt-api Deployment manifest has duplicate port forwarding definition for port 8443, same port different name. Drop the "metrics" port definition in favor of "virt-api"...

Importing routes using FRR-k8s to CUDN doesn't work as expcted

2

### What happened? The following example in BGP docs doesnt work https://github.com/ovn-kubernetes/ovn-kubernetes/blob/master/docs/features/bgp-integration/route-advertisements.md#import-routes-into-a-cudn It seems the FRR wont work as expected result in no connectivity from a pod on the CUDN...

persistentIPs: Deprecate primary UDN IPAMClaim annotation - 'k8s.ovn.org/primary-udn-ipamclaim'

9

## 📑 Description This PR implements the part of deprecating the UDN IPAMClaim annotation in favor of the default NSE extension for IPAMClaim https://github.com/kyrtapz/ovn-kubernetes/blob/master/docs/okeps/okep-5233-preconfigured-udn-addresses.md#pod-network-identity The NetworkSelectionElement (NSE) API has been...

pod-allocation-annotator: Drop IPAMReconciler argument

1

## 📑 Description This is a followup PR for https://github.com/ovn-kubernetes/ovn-kubernetes/pull/5492 address this [review comment](https://github.com/ovn-kubernetes/ovn-kubernetes/pull/5492#discussion_r2332341740) The PR drop the pod-allocation-annotator IPAMClaimReconcilder argument in favor of option function for composing the IPAMClaimReconcilder...