Bug 1991621 - [release-4.8] Creating a network policy in OVN-Kubernetes can be very inefficient.
Summary: [release-4.8] Creating a network policy in OVN-Kubernetes can be very ineffic...
Keywords:
Status: CLOSED DUPLICATE of bug 1996729
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Networking
Version: 4.8
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
: 4.8.z
Assignee: Andrew Stoycos
QA Contact: Anurag saxena
URL:
Whiteboard:
Depends On: 1968569
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-08-09 14:30 UTC by Casey Callendrello
Modified: 2021-09-22 18:50 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-09-22 18:50:38 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description Casey Callendrello 2021-08-09 14:30:48 UTC 
This bug was initially created as a copy of Bug #1968569


Description of problem: When creating a network policy in ovn-kubernetes that selects a lot of pods, it is very inefficient.

This is because it executes multiple (1-4) nbdb transactions for each pod selected by the policy.

We can fix this by being smart and bulk-processing pods on policy creation.


How reproducible: Very


Steps to Reproduce:
1. Create 100-200 pods in a cluster
2. Create a policy that selects those pods
3. Watch to see that it takes 10s of seconds for the policy to take effect
Comment 2 Andrew Stoycos 2021-09-22 18:50:38 UTC 

*** This bug has been marked as a duplicate of bug 1996729 ***
Note You need to log in before you can comment on or make changes to this bug.