Skip to content

Allowing Dynamic Modification of IP Ranges in ExternalIPPool #7143

@rajnkamr

Description

@rajnkamr

Describe the problem/challenge you have

The webhook blocks the modification of the IP range for an ExternalIPPool, as it might lead to conflicts with resources already allocated from the original range. This is a safety measure to prevent accidental or unexpected reallocation or loss of IP addresses. However it blocks the allocation even if no resources are created with it.

Describe the solution you'd like

The webhook should verify whether any IP addresses within the original range are currently allocated (e.g., by Egress or other resources) before allowing the range to be modified. If no resources are using IPs in the area being shrunk/expanded, the webhook would allow it.

Anything else you would like to add?

Examples-
../ExternalIpPools.yaml": admission webhook "externalippoolvalidator.antrea.io" denied the request: existing IPRanges [192.168.100.10-192.168.100.200] cannot be deleted

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/designCategorizes issue or PR as related to design.kind/featureCategorizes issue or PR as related to a new feature.lifecycle/frozenIndicates that an issue or PR should not be auto-closed due to staleness.

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions