Add support for Kind OVNK IPV6 deployment

[yboaron]

Depends on: ovn-kubernetes/ovn-kubernetes#4955

[submariner-bot]

🤖 Created branch: z_pr1751/yboaron/ovn_add_ipv6

[yboaron]

@mkolesnik , QQ: I'm getting [1] error when trying to deploy Kind clusters with OVNK and IPV6 with this PR(with make clusters using=ipv6-stack,ovn), while running directly ./ovn-kubernetes/contrib/kind.sh .... things looks fine, any idea ?

[1]
[cluster2] ++ sysctl net.ipv6.conf.all.forwarding [cluster1] ++ sysctl net.ipv6.conf.all.forwarding [cluster2] ++ awk '{print $3}' [cluster1] ++ awk '{print $3}' [cluster2] + TMPVAR=0 [cluster2] + echo 'net.ipv6.conf.all.forwarding is equal to 0' [cluster2] net.ipv6.conf.all.forwarding is equal to 0 [cluster2] + '[' 0 '!=' 1 ']' [cluster1] + TMPVAR=0 [cluster2] + '[' true == true ']' [cluster2] + sudo sysctl -w net.ipv6.conf.all.forwarding=1 [cluster1] + echo 'net.ipv6.conf.all.forwarding is equal to 0' [cluster1] net.ipv6.conf.all.forwarding is equal to 0 [cluster1] + '[' 0 '!=' 1 ']' [cluster1] + '[' true == true ']' [cluster1] + sudo sysctl -w net.ipv6.conf.all.forwarding=1 [cluster2] sysctl: permission denied on key "net.ipv6.conf.all.forwarding" [cluster1] sysctl: permission denied on key "net.ipv6.conf.all.forwarding" [cluster2] Failed to run './ovn-kubernetes/contrib/kind.sh -ov localhost:5000/ovn-daemonset-f:latest -cn cluster2 -ric -n4 -i6 -sw -lr

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further
activity occurs. Thank you for your contributions.

[github-actions]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further
activity occurs. Thank you for your contributions.

[submariner-bot]

🤖 Closed branches: [z_pr1751/yboaron/ovn_add_ipv6]

[submariner-bot]

🤖 Created branch: z_pr1751/yboaron/ovn_add_ipv6

[yboaron]

We only need the extra networking permissions to container for OVN/IPV6 deployment.

@mkolesnik @skitt , is it possible to set DAPPER_RUN_ARGS content based on CNI, IP family env vars ?

[skitt]

DAPPER_RUN_ARGS is a bit of a cheat — it’s not used as an environment variable as such inside the container, so nothing running in the container can set it meaningfully. The .dapper scripts extracts the value of the variable from the container image before running it.

However since we decide what .dapper does, anything can be done. Could you explain what the exacts criteria (as in, which values in which files) are and which containers need to run with privileges?

[yboaron]

For IPV6 OVN deployment (make clusters using=ipv6-stack,ovn) OVN-K script [1] sets net.ipv6.conf.all.forwarding and sudo sysctl -w net.ipv6.conf.all.disable_ipv6 .
so, container should run with net privileges.

[1]
https://github.com/ovn-kubernetes/ovn-kubernetes/blob/master/contrib/kind.sh#L642