Kuryr Kubernetes Openshift Routes integration design¶

The OCP-Route handler¶

The OCP-Route handler watches the apiserver’s for updates to Openshift Route resources. The following scheme describes OCP-Route controller SW architecture:

Similiar to Kubernetes Ingress, each OCP-Route object being translated to a L7 policy in L7 router, and the rules on OCP-Route become L7 (URL) mapping rules in that L7 policy. The L7 policy is configured to forward the filtered traffic to LbaaS Pool. The LbaaS pool represents an Endpoints resource, and it’s the Service/Endpoints handler responsibility to attach all its members to this pool. Since the Endpoints resource is not aware of changes in OCP-Route objects pointing to it, the OCP-Route handler should trigger this notification, the notification will be implemented using annotation of the relevant Endpoint resource.

Use cases examples¶

This section describes in details the following scenarios:

1. Create OCP-Route, create Service/Endpoints.
2. Create Service/Endpoints, create OCP-Route, delete OCP-Route.

• Create OCP-Route, create Service/Endpoints:

  • OCP-Route is created under namespace ‘mynamespace’

    • OCP-Route details :

    apiVersion: v1
    kind: Route
    metadata:
      name: test
      spec:
        host: www.example.com
        to:
          kind: Service
          name: s1
    

    • Since it’s the first route pointing to this Service, the OCP-Route handler will create LbaaS pool (attached to L7 router)- named ‘mynamespace_s1’.
    • The OCP-Route handler will create L7 rule and L7 policy, the L7 policy direct it’s filtered traffic towards ‘mynamespace_s1’ pool.

  • Service/Endpoints is created under namespace ‘mynamespace’

    • name: s1
    • The Service/Endpoints handler will create user loadbalancer
    • The Service/Endpoints handler will check for pool named ‘mynamespace_s1’ and add its members to this pool.

• Create Service/Endpoints, create OCP-Route, delete OCP-Route:

  • Service/Endpoints is created under namespace ‘mynamespace’
    • name: s1
    • The Service/Endpoints handler will create user loadbalancer
    • Since no pool named ‘mynamespace_s1’ exist in L7 router, Service will exit.
  • OCP-Route is created with same details as described in above yaml file.
    • Since it’s the first route pointing to this Service, the OCP-Route handler will create LbaaS pool (attached to L7 router) named ‘mynamespace_s1’.
    • The OCP-Route handler will create L7 rule and L7 policy, the L7 policy configured to direct its filtered traffic towards ‘mynamespace_s1’ pool.
    • The last step from OCP-Route handler will be to notify (using annotation) s1 Endpoint.
    • As a result to the OCP-Route notification, the Endpoint handler will be called. The Service/Endpoints handler will update the members information attached to ‘mynamespace_s1’ pool.
  • OCP-Route is deleted
    • OCP-Route handler will first delete L7 rule and L7 policy.
    • In case no other L7 policy is pointing ‘mynamespace_s1’ pool, the OCP-Route handler will delete ‘mynamespace_s1’ pool’s members and the pool itself. The last step from Ingress handler will be to notify s1 Service/Endpoints.
    • As a result to the OCP-Route handler notification, the Service/Endpoints handler will set its internal state to ‘no Ingress is pointing’ state.