Allow users to specify Gateway Subnet

We currently reserve a range of addresses to configure host to service
traffic internally in ovn. We need to allow users to specify this range
to avoid conflicting with addresses they use in their local infra

Signed-off-by: Ben Pickard <bpickard@redhat.com>

Author: bpickard22

openapi/generated_openapi/zz_generated.openapi.go

@@ -25116,6 +25116,14 @@
         "routingViaHost": {
           "description": "RoutingViaHost allows pod egress traffic to exit via the ovn-k8s-mp0 management port into the host before sending it out. If this is not set, traffic will always egress directly from OVN to outside without touching the host stack. Setting this to true means hardware offload will not be supported. Default is false if GatewayConfig is specified.",
           "type": "boolean"
+        },
+        "v4InternalMasqueradeSubnet": {
+          "description": "V4InternalMasqueradeSubnet contains the v4 masquerade addresses used internally by ovn-kubernetes to enable host to service traffic. The host is configured with these addresses, as well as the shared gateway bridge interface.The values can be changed after installation. The default subnet is 169.254.169.0/29",
+          "type": "string"
+        },
+        "v6InternalMasqueradeSubnet": {
+          "description": "V6InternalMasqueradeSubnet contains the v6 masquerade addresses used internally by ovn-kubernetes to enable host to service traffic. The host is configured with these addresses, as well as the shared gateway bridge interface.The values can be changed after installation. The default subnet is fd69::/125",
+          "type": "string"
         }
       }
     },

openapi/openapi.json

@@ -223,6 +223,12 @@ spec:
                               description: RoutingViaHost allows pod egress traffic to exit via the ovn-k8s-mp0 management port into the host before sending it out. If this is not set, traffic will always egress directly from OVN to outside without touching the host stack. Setting this to true means hardware offload will not be supported. Default is false if GatewayConfig is specified.
                               type: boolean
                               default: false
+                            v4InternalMasqueradeSubnet:
+                              description: V4InternalMasqueradeSubnet contains the v4 masquerade addresses used internally by ovn-kubernetes to enable host to service traffic. The host is configured with these addresses, as well as the shared gateway bridge interface.The values can be changed after installation. The default subnet is 169.254.169.0/29
+                              type: string
+                            v6InternalMasqueradeSubnet:
+                              description: V6InternalMasqueradeSubnet contains the v6 masquerade addresses used internally by ovn-kubernetes to enable host to service traffic. The host is configured with these addresses, as well as the shared gateway bridge interface.The values can be changed after installation. The default subnet is fd69::/125
+                              type: string
                         genevePort:
                           description: geneve port is the UDP port to be used by geneve encapulation. Default is 6081
                           type: integer

operator/v1/0000_70_cluster-network-operator_01.crd.yaml

@@ -507,6 +507,20 @@ type GatewayConfig struct {
 	// The supported values are "Restricted" and "Global".
 	// +optional
 	IPForwarding IPForwardingMode `json:"ipForwarding,omitempty"`
+	// V4InternalMasqueradeSubnet contains the v4 masquerade addresses used internally by
+	// ovn-kubernetes to enable host to service traffic. The host is configured with these
+	// addresses, as well as the shared gateway bridge interface.The values can be changed after
+	// installation.
+	// The default subnet is 169.254.169.0/29
+	// +optional
+	V4InternalMasqueradeSubnet string `json:"v4InternalMasqueradeSubnet,omitempty"`
+	// V6InternalMasqueradeSubnet contains the v6 masquerade addresses used internally by
+	// ovn-kubernetes to enable host to service traffic. The host is configured with these
+	// addresses, as well as the shared gateway bridge interface.The values can be changed after
+	// installation.
+	// The default subnet is fd69::/125
+	// +optional
+	V6InternalMasqueradeSubnet string `json:"v6InternalMasqueradeSubnet,omitempty"`
 }
 
 type ExportNetworkFlows struct {