This MR implements support for the new LBaaS feature.  Namely, if we want to our load balancer endpoints to be reachable from outside CERN network, they need to be added to the same LanDB set as the router nodes (ingress) so that they get the appropriate firewall openings.
The updated LanDB set looks like this:
- apiVersion: landb.operator.cern.ch/v1alpha1 kind: LandbSet metadata: name: landb-sync-ingress-nodes namespace: openshift-cern-landb spec: domain: GPN labelSelector: router.cern.ch/request-external-firewall-opening-for-http-https=true loadbalancerLabelSelector: "" # will select all loadbalancer services loadbalancerNamespace: "" # will watch all namespaces setName: IT OKD webeos INGRESS NODES type: INTER
Additionally, this PR also upgrades the CRDs to
v1beta will be removed in Kubernetes 1.22 .
Since this PR is quite large, I recommend reviewers to look at the individual commits.