Skip to content

Conversation

axel7born
Copy link
Contributor

@axel7born axel7born commented Jul 14, 2025

How to categorize this PR?

/area documentation
/kind enhancement

What this PR does / why we need it:
Emphasize that migration to dual-stack can't be reverted.
Add validation for updates to spec.networking.ipFamilies.

Which issue(s) this PR fixes:
Fixes #

Special notes for your reviewer:

Release note:

Updates to `spec.networking.ipFamiles` are now validated.

Copy link
Contributor

gardener-prow bot commented Jul 14, 2025

@axel7born: The label(s) kind/docs cannot be applied, because the repository doesn't have them.

In response to this:

How to categorize this PR?

/area networking
/kind docs

What this PR does / why we need it:
Emphasize that migration to dual-stack can't be reverted.

Which issue(s) this PR fixes:
Fixes #

Special notes for your reviewer:

Release note:

NONE

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@gardener-prow gardener-prow bot added the area/networking Networking related label Jul 14, 2025
@gardener-prow gardener-prow bot requested review from ScheererJ and timebertt July 14, 2025 06:15
@gardener-prow gardener-prow bot added cla: yes Indicates the PR's author has signed the cla-assistant.io CLA. do-not-merge/needs-kind Indicates a PR lacks a `kind/foo` label and requires one. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Jul 14, 2025
@axel7born
Copy link
Contributor Author

/area documentation

@gardener-prow gardener-prow bot added the area/documentation Documentation related label Jul 14, 2025
@axel7born
Copy link
Contributor Author

/kind enhancement

@gardener-prow gardener-prow bot added kind/enhancement Enhancement, improvement, extension and removed do-not-merge/needs-kind Indicates a PR lacks a `kind/foo` label and requires one. labels Jul 14, 2025
Copy link
Member

@ScheererJ ScheererJ left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/assign

Thanks for making the boundary condition of dual-stack migration clear.

I agree with @vpnachev that we should also add corresponding validation logic.

@gardener-prow gardener-prow bot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Jul 16, 2025
@axel7born axel7born changed the title Enhance docs for dual-stack migration. Enhance docs for dual-stack migration and add validation for update of ipFamilies. Jul 16, 2025
@ScheererJ
Copy link
Member

/approve

Copy link
Contributor

gardener-prow bot commented Jul 17, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ScheererJ

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@gardener-prow gardener-prow bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jul 17, 2025
Comment on lines +762 to +765
if !apiequality.Semantic.DeepEqual(newIPFamilies, oldIPFamilies) {
allErrs = append(allErrs, field.Forbidden(fldPath,
fmt.Sprintf("unsupported IP family update: oldIPFamilies=%v, newIPFamilies=%v", oldIPFamilies, newIPFamilies)))
}
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This will not allow migration from ipv6 to [ipv6, ipv4], the docs suggest this should be supported scenario

This document provides a guide for migrating IPv4-only or IPv6-only Gardener shoot clusters to dual-stack networking (IPv4 and IPv6).

* Update docs.
* Update validation.
@axel7born axel7born force-pushed the enh/dual-stack-docs branch from 2f49ef5 to 6aec507 Compare July 18, 2025 07:52
@@ -17,7 +17,9 @@ Dual-stack networking allows clusters to operate with both IPv4 and IPv6 protoco

### Key Considerations

- Adding a new protocol is only allowed as the second element in the array, ensuring the primary protocol remains unchanged.
- Single stack IPv4 clusters can be migrated to dual-stack by adding IPv6 as second element.
-The migration of single stack IPv6 clusters to dual-stack is not supported.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Haven't tracked the topic, but is it really not supported?

Suggested change
-The migration of single stack IPv6 clusters to dual-stack is not supported.
- The migration of single stack IPv6 clusters to dual-stack is not supported.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We planned to support it as we thought it would not be much additional effort. However, we abandoned the idea as we didn't see a real use case.

@@ -1164,7 +1164,7 @@ type Networking struct {
Nodes *string
// Services is the CIDR of the service network. This field is immutable.
Services *string
// IPFamilies specifies the IP protocol versions to use for shoot networking. This field is immutable.
// IPFamilies specifies the IP protocol versions to use for shoot networking.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same change is needed at

// IPFamilies specifies the IP protocol versions to use for shoot networking. This field is immutable.

@axel7born axel7born force-pushed the enh/dual-stack-docs branch from e51ce73 to d6c6ac4 Compare July 18, 2025 09:10
@rfranzke rfranzke requested a review from vpnachev July 22, 2025 06:35
Copy link
Member

@vpnachev vpnachev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@gardener-prow gardener-prow bot added the lgtm Indicates that a PR is ready to be merged. label Jul 23, 2025
Copy link
Contributor

gardener-prow bot commented Jul 23, 2025

LGTM label has been added.

Git tree hash: a4947868693875b851ee6a515f7f495bd07aee38

@gardener-prow gardener-prow bot merged commit 5ee1ab3 into gardener:master Jul 23, 2025
19 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. area/documentation Documentation related area/networking Networking related cla: yes Indicates the PR's author has signed the cla-assistant.io CLA. kind/enhancement Enhancement, improvement, extension lgtm Indicates that a PR is ready to be merged. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants