poc: Add proof of concepts for the different network scenarios studied and documen them

avisiedo commented 3 years ago

Proof of concept to play with different scenarios for communicating with Freeipa services:

[x] Scenario 1 - Inside the pod: A client container should be able to connect the different ports of the pod.
[x] Scenario 2 - Intra Pod: A client in a secondary pod in the same node should be able to connect to the different pod ports.
[x] Scenario 3 - Intra Pod different Nodes: A client in a secondary pod in a different node should be able to connect to the different pod ports.
[ ] Scenario 4 - External access: Allowing access from out of the cluster to the cluster.
- nodePort.
- [x] It worked on CodeReadyContainers with no changes.
- [x] It worked on OpenStack cluster by adding two rules to the security group.
- externalIP + NodePort.
- [x] It worked on CodeReadyContainers by assigning an extra IP to the VM.
- [ ] Pending to run the same in an OpenStack cluster.
- externalIP + LoadBalancer.
- [ ] It should work with OpenStack Victoria.
[ ] Scenario 5 - Intracluster: A natural extension from the above is using the services from another cluster so that we close the circle for the hybrid cloud scenario in terms of network traffic.
- [ ] Deploy in cluster 1 and use the services from cluster 2.
- [ ] Deploy in cluster 1 and cluster 2; cluster 2 is federated to cluster 1.

openshift-ci-robot commented 3 years ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: avisiedo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/freeipa/freeipa-operator/blob/master/OWNERS)~~ [avisiedo] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment

openshift-ci[bot] commented 3 years ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: avisiedo

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/freeipa/freeipa-operator/blob/master/OWNERS)~~ [avisiedo] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment

freeipa / freeipa-operator

poc: Add proof of concepts for the different network scenarios studied and documen them #24