Milestone v0.9.0 planning

[michelleN]

Please refer to issues you'd like to see resolved in comments on this thread.

[michelleN]

#2369

[shashankram]

https://github.com/openservicemesh/osm/issues/2356
#2365
#2263
#2218
#2472
https://github.com/openservicemesh/osm/issues/2453
#2172

[snehachhabria]

#2369
#2368
#2218
#1704
#1471
#737

[shashankram]

Upgrade related:
#2737
#2738

[draychev]

My proposal:

Upgrade Story (upgrade v2)

• Proposal: Use a CRD instead of ConfigMap for OSM configuration (root) Use a CRD instead of ConfigMap for OSM configuration #2738
  • config: Design a new OSM Config CRD (YAML only) config: Design a new OSM Config CRD (YAML only) #3033
  • config: Add validation to the new OSM Config CRD (in YAML) config: Add validation to the new OSM Config CRD (in YAML) #3034
  • config: Create code gen helper for generation of Go Client code for new OSM Config CRD config: Create code gen helper for generation of Go Client code for new OSM Config CRD #3035
  • config: Generate Go Client code for new OSM Config CRD config: Generate Go Client code for new OSM Config CRD #3037
  • config: Create new Configuration CRD informers config: Create new Configuration CRD informers #3038
  • config: Swap ConfigMap usage with Configuration CRD in the pkg/configurator module config: Swap ConfigMap usage with Configuration CRD in the pkg/configurator module #3039
  • config: Update documentation to reflect the usage of a Configuration CRD (not a ConfigMap); Cleanup config: Update documentation to reflect the usage of a Configuration CRD (not a ConfigMap); Cleanup #3040
  • config: Update ValidatingWebhookConfig and handler (for osm-config ConfigMap changes) config: Update ValidatingWebhookConfig and handler (for osm-config ConfigMap changes) #3041
• Label all OSM deployed Kubernetes resources with a common key/value Label all OSM deployed Kubernetes resources with a common key/value #2925
• SMI conversion webhook to upgrade to newer SMI API versions SMI conversion webhook to upgrade to newer SMI API versions #2737
• helm upgrade overrides manual edits in osm-config helm upgrade overrides manual edits in osm-config #2386
• Research and build POC for Helm post-delete hook for OSM resources Research and build POC for Helm post-delete hook for OSM resources #2931
• Move osm-config ConfigMap ownership from Helm to OSM Controller Move osm-config ConfigMap ownership from Helm to OSM Controller #2932
• Move osm webhook configuration resource ownership from Helm to OSM Controller Move osm webhook configuration resource ownership from Helm to OSM Controller #2961
• Add check in the OSM CLI for available updates / upgrades / new versions Add check in the OSM CLI for available updates / upgrades / new versions #1720
• cli: Remove --enable-permissive-traffic-policy from osm install CLI (can we?) cli: Remove --enable-permissive-traffic-policy from osm install CLI #2922
• OSM CLI prompt to upgrade improvement / feature request OSM CLI prompt to upgrade #2294
• Add check in the OSM CLI for available updates / upgrades / new versions CLI, size/S, upgrade Add check in the OSM CLI for available updates / upgrades / new versions #1720

xDS Upgrade to v3

• ads: Limit to a configurable upper bound and check the number of Envoy xDS connections ads: Limit to a configurable upper bound and check the number of Envoy xDS connections #2332
• xds: Envoys should be grouped by ServiceAccount (config distributed should be the same) xds: Envoys should be grouped by ServiceAccount (config distributed should be the same) #3046
• Use go-control-plane's NewServer() and SnapshotCache system to improve ADS Use go-control-plane's NewServer() and SnapshotCache system to improve ADS #2683

Ingress

• Harden ingress security by using per ingress resource backend protocol configuration Harden ingress security by using per ingress resource backend protocol configuration #2365
• Make ingress compatible with v1 of Kubernetes ingress Make ingress compatible with v1 of Kubernetes ingress #2798
• Make ingress compatible with v1 of Kubernetes ingress Make ingress compatible with v1 of Kubernetes ingress #2798
• Ingress with ngnix results in 502 bad gateway Ingress with ngnix results in 502 bad gateway #2930
• Configure ALPN for external clients using ingress Configure ALPN for external clients using ingress #1020
• Flesh out Ingress story for OSM (root) Ingress story for OSM #285
• create ingress proposal for SMI community based on our implementation create ingress proposal for SMI community based on our implementation #981
• Track ingress/egress traffic with WASM metrics extension Track ingress traffic with WASM metrics extension #1697

Troubleshooting Tools

• OSM consistency checker for mesh health and mesh configuration on the proxies. OSM consistency checker for mesh health and mesh configuration on the proxies. #2099
• tool to check envoy config tests: integrate tool to check envoy config #2728
• Create an endpoint returning mesh data plane health Create an endpoint returning mesh data plane health #1718
• cli: Create CLI tool to run troubleshooting tooling cli: Create CLI tool to run troubleshooting tooling #2879
• osm command for verifying mTLS connection between two services osm command for verifying mTLS connection between two services #1388
• Use custom image for Envoy container with necessary debugging tools or a debug sidecar for debugging Use custom image for Envoy container with necessary debugging tools or a debug sidecar for debugging #682
• Create an endpoint that returns versions of SMI APIs that the osm-controller supports Create an endpoint that returns versions of SMI APIs that the osm-controller supports #1590
• osm command for verifying mTLS connection between two services CLI, debugging & observability, improvement / feature request, size/L, tooling osm command for verifying mTLS connection between two services #1388
• Create an osm command that allows a user to check if an osm control plane is healthy Create an osm command that allows a user to check if an osm control plane is healthy #85

Egress

• create egress proposal with SMI community based on our implementation create egress proposal with SMI community based on our implementation #982
• egress: Prototype, design, and implement a fine-grained egress policy Prototype, design, and implement a fine-grained egress policy #3045

Endpoint Discovery

• endpoints: Wait for Envoy to be ready before peers are updated with new Endpoint endpoints: Wait for Envoy to be ready before peers are updated with new Endpoints #3044
• envoy: Implement locality-based prioritized (affinitized) endpoint traffic routing envoy: Implement locality-based prioritized (affinitized) endpoint traffic routing #3043
• envoy: Implement active health checking envoy: Implement active health checking #3042

Upgrade CRDs

• Move to apiextensions.k8s.io/v1 Move to apiextensions.k8s.io/v1 #2271

User Experience / OSM CLI

• cli: Augment CLI to list supported SMI CRDs and their versions by the currently installed OSM Controller cli: Augment CLI to list supported SMI CRDs and their versions by the currently installed OSM Controller #2849
• cli: Augment OSM CLI to show the version of the installed control plane(s) on the current k8s cluster cli: Augment OSM CLI to show the version of the installed control plane(s) on the current k8s cluster #2848
• cli: Change uninstall command to match "osm install" improvement / feature request cli: Change uninstall command to match "osm install" #2793
• osm CLI should check if mesh exists before adding namespace CLI, good first issue, improvement / feature request, size/XS osm CLI should check if mesh exists before adding namespace #2494
• Make it clear that CLI uses osm-system as default namespace for various commands CLI, good first issue, improvement / feature request, size/XS Make it clear that CLI uses osm-system as default namespace for various commands #2455
• CLI delete behavior undefined when more than one OSM w same name on cluster CLI, good first issue, improvement / feature request, size/M CLI delete behavior undefined when more than one OSM w same name on cluster #1839
• Update uninstall to clean-up OSM without downtime & document steps CLI, size/L Update uninstall to clean-up OSM without downtime & document steps #959
• add verbose output for osm install with -v flag CLI, good first issue, p2, size/M add verbose output for osm install with -v flag #912

Payload Health Probes

• Support for TCP and gRPC readiness, liveness and startup probes Support for TCP and gRPC readiness, liveness and startup probes #2543
• Bug in Liveness/Readiness rewriting for HTTPS probes Bug in Liveness/Readiness rewriting for HTTPS probes #2515
• Envoy must expose health probes of underlying service Envoy must expose health probes of underlying service  #2207

Integrations

• Integrate w/ Dapr Integrate w/ Dapr #2875
• Add support for linux/arm64 Add support for linux/arm64 #2821

Testing

• Create soak test environment for project Create soak test environment for project #2392

Other

• envoy secret clean up envoy secret clean up  #2795
• Provide capability to install with Chocolatey Provide capability to install with Chocolatey #1426
• Use XDS structs and marshal to JSON while creating Envoy bootstrap config Use XDS structs and marshal to JSON while creating Envoy bootstrap config #2263
• Failing local service cluster with target port of service Failing local service cluster with target port of service #1975

Continuing work from v0.8

• v0.8 documentation #2854

---

More

• Create a demo for an A/B testing example Create a demo for an A/B testing example #737
• Use consistent spec files between manual and automated demo Use consistent spec files between manual and automated demo #1471
• Use Go std testing library for unit tests Use Go std testing library for unit tests #1704
• Add SMI Traffic Split (v1alpha4) support in the routes v2 feature Add SMI Traffic Split (v1alpha4) support in the routes v2 feature  #2368
• Extend support for host headers with configuring routes Extend support for host headers with configuring routes #2369
• Document support for different application traffic types #2356
• Use XDS structs and marshal to JSON while creating Envoy bootstrap config Use XDS structs and marshal to JSON while creating Envoy bootstrap config #2263
• Required resource setting for injected containers Required resource setting for injected containers #2472
• Docs contain links that are either broken in Github or the website #2453
• Support capability to incrementally migrate legacy services to a service mesh Support capability to incrementally migrate legacy services to a service mesh #2172
• OSM resources should have security contexts OSM resources should have security contexts #3054
• Provide Windows container support Provide Windows container support #2082
• Create Pod Security Policy (PSP) for osm Create Pod Security Policy (PSP) for osm #1941
• Revisit release process Revisit release process #2841
• Document data plane performance Document data plane performance #2993
• Define deprecation process for Helm chart fields removal Define deprecation process for Helm chart fields removal  #2975

---

Onboarding

• Use XDS structs and marshal to JSON while creating Envoy bootstrap config Use XDS structs and marshal to JSON while creating Envoy bootstrap config #2263
• Log pod name in XDS logs; internal IDs are not useful Log pod name in XDS logs; internal IDs are not useful #2924
• ads: Limit to a configurable upper bound and check the number of Envoy xDS connections ads: Limit to a configurable upper bound and check the number of Envoy xDS connections #2332
• Use ServiceIdentity type in catalog APIs instead of ServiceAccount Use ServiceIdentity type in catalog APIs instead of service.K8sServiceAccount #2218
• cli: Augment CLI to list supported SMI CRDs and their versions by the currently installed OSM Controller cli: Augment CLI to list supported SMI CRDs and their versions by the currently installed OSM Controller #2849
• cli: Augment OSM CLI to show the version of the installed control plane(s) on the current k8s cluster cli: Augment OSM CLI to show the version of the installed control plane(s) on the current k8s cluster #2848
• cli: Change uninstall command to match "osm install" improvement / feature request cli: Change uninstall command to match "osm install" #2793
• osm CLI should check if mesh exists before adding namespace CLI, good first issue, improvement / feature request, size/XS osm CLI should check if mesh exists before adding namespace #2494
• Make it clear that CLI uses osm-system as default namespace for various commands CLI, good first issue, improvement / feature request, size/XS Make it clear that CLI uses osm-system as default namespace for various commands #2455
• CLI delete behavior undefined when more than one OSM w same name on cluster CLI, good first issue, improvement / feature request, size/M CLI delete behavior undefined when more than one OSM w same name on cluster #1839
• Update uninstall to clean-up OSM without downtime & document steps CLI, size/L Update uninstall to clean-up OSM without downtime & document steps #959
• add verbose output for osm install with -v flag CLI, good first issue, p2, size/M add verbose output for osm install with -v flag #912
• Use OSM for blue/green deployment #2310

[bridgetkromhout]

As discussed in the planning meeting, let's also add Implement SMI Metrics #379.