F5Networks / k8s-bigip-ctlr

Repository for F5 Container Ingress Services for Kubernetes & OpenShift.
Apache License 2.0
357 stars 194 forks source link

RFE: usability improvement add --ipam-namespace even it is yet not customizable to provide sane defaults #3430

Closed alonsocamaro closed 3 weeks ago

alonsocamaro commented 4 months ago

Title

RFE: usability improvement add --ipam-namespace even it is yet not customizable to we have sane defaults

Description

This RFE is to improve usability by having a sane default when IPAM is enabled. When using defaults in the components, these should be compatible.

Actual Problem

When using --ipam=true is used and not using --namespace=kube-system is a configuration error.

It is expected that IPAM namespace is to be configured. Although the IPAM namespace is not yet customizable, if we already provide a --ipam-namespace parameter with default set to kube-system we would provide a sane default when customers enable --ipam=true.

Additionally by using --ipam-namespace and not --namespace we don´t force the customers of not being able to use the --namespace-label which is incompatible with --namespace.

Solution Proposed

Add -ipam-namespace with defaults to kube-system and do not allow this setting to be modified until FIC allows this namespace to be customized. Throw an ERROR log message in such case.

trinaths commented 4 months ago

This RFE is added to CIS 3.x RFE list. Created [CONTCNTR-4741] for internal tracking.

vklohiya commented 2 months ago

Added support for --ipam-namespace, it will be available in next release.

mdditt2000 commented 3 weeks ago

Resolved in CIS 2.18 - https://clouddocs.f5.com/containers/latest/reference/release-notes.html